Vulnerability GHSA-3263-v5v9-xq8q
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 5.4
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
5 months ago
May 18, 2026 at 05:44 PM UTC
Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
0.0.3 - 0.0.31
0.0.3 - 0.0.31
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
Medium Risk
4 months ago
Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
High Risk
5 months ago
Budibase: Unrestricted Upload of File with Dangerous Type
0.0.3 - 0.0.31 GHSA-82rc-gxrg-v4gf
0.0.3 - 0.0.31 GHSA-82rc-gxrg-v4gf
High Risk
5 months ago
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
High Risk
7 months ago
Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview
0.0.3 - 0.0.31 GHSA-4647-wpjq-hh7f
0.0.3 - 0.0.31 GHSA-4647-wpjq-hh7f
Impacted packages
Timeline
Published
5 months ago
May 18, 2026 at 05:44 PM UTC
Last Modified
5 months ago
June 09, 2026 at 12:00 AM UTC