Launch Week Day 1: Announcing Security Design Review
Start for Free
npm

budibase

View on npm registry
6 Total advisories
6 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

CVE-2026-48128

Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step
HIGH 7.6
npm

CVE-2026-46426

Budibase: Unrestricted Upload of File with Dangerous Type
MEDIUM 5.4
npm

CVE-2026-45718

Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
HIGH 7.7
npm

CVE-2026-45061

Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)
HIGH 8.7
npm

CVE-2026-33226

Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview
CRITICAL 9.9
npm

CVE-2026-27702

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes