Vulnerability GHSA-4647-wpjq-hh7f
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 8.7
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 months ago
March 18, 2026 at 08:22 PM UTC
Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview
0.0.3 - 0.0.31
0.0.3 - 0.0.31
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
Medium Risk
4 months ago
Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
High Risk
5 months ago
Budibase: Unrestricted Upload of File with Dangerous Type
0.0.3 - 0.0.31 GHSA-82rc-gxrg-v4gf
0.0.3 - 0.0.31 GHSA-82rc-gxrg-v4gf
Medium Risk
5 months ago
Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
0.0.3 - 0.0.31 GHSA-3263-v5v9-xq8q
0.0.3 - 0.0.31 GHSA-3263-v5v9-xq8q
High Risk
5 months ago
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
Impacted packages
Timeline
Published
7 months ago
March 18, 2026 at 08:22 PM UTC
Last Modified
7 months ago
March 25, 2026 at 07:47 PM UTC