Vulnerability GHSA-82rc-gxrg-v4gf
Advisory details are being prepared in the background.
High Risk
HIGH RISK
CVSS Score: 7.6
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
5 months ago
May 19, 2026 at 04:31 PM UTC
Budibase: Unrestricted Upload of File with Dangerous Type
0.0.3 - 0.0.31
0.0.3 - 0.0.31
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
0.0.3 - 0.0.31 GHSA-qqf5-x7mj-v43p
Medium Risk
4 months ago
Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
0.0.3 - 0.0.31 GHSA-6964-pp88-6wp9
Medium Risk
5 months ago
Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows
0.0.3 - 0.0.31 GHSA-3263-v5v9-xq8q
0.0.3 - 0.0.31 GHSA-3263-v5v9-xq8q
High Risk
5 months ago
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
0.0.3 - 0.0.31 GHSA-xh5j-727m-w6gg
High Risk
7 months ago
Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview
0.0.3 - 0.0.31 GHSA-4647-wpjq-hh7f
0.0.3 - 0.0.31 GHSA-4647-wpjq-hh7f
Impacted packages
Timeline
Published
5 months ago
May 19, 2026 at 04:31 PM UTC
Last Modified
5 months ago
June 09, 2026 at 12:00 AM UTC