📦 Budibase

This CVE describes a critical server-side JavaScript injection vulnerability in Budibase Cloud (SaaS) that allows any authenticated user to execute arbitrary code on the server via unsafe eval() in vi...

This vulnerability allows Creator-level users in Budibase to bypass UI restrictions and invite new users with any role (including Admin) via API manipulation. This leads to privilege escalation and po...

This vulnerability in Budibase allows attackers to execute arbitrary code by exploiting improper control of dynamically-managed code resources. It affects all Budibase deployments running versions pri...