budibase

Budibase: Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)

Budibase Unrestricted Server-Side Request Forgery (SSRF) via REST Datasource Query Preview

Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints

@budibase/server: Command Injection in PostgreSQL Dump Command

Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write

Budibase: Command Injection in Bash Automation Step

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist

Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step