Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@budibase/backend-core

npm

Budibase backend core libraries used in server and worker

View on npmjs.org

Security Advisories for @budibase/backend-core in npm

Moderate
6 days ago

Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker GSA_kwCzR0hTQS13eHE3LXgzcXAtdmNyOM4ABYm9

npm @budibase/backend-core
Moderate
about 1 month ago

Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour GSA_kwCzR0hTQS02dnAyLTZyN20tMmp2eM4ABXG8

npm @budibase/backend-core
High
about 2 months ago

Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover GSA_kwCzR0hTQS00ZjlqLXZyNHAtNjQycs4ABVw2

npm @budibase/backend-core
Critical
2 months ago

Budibase: Authentication Bypass via Unanchored Regex in Public Endpoint Matcher — Unauthenticated Access to Protected Endpoints GSA_kwCzR0hTQS04NzgzLTN3Z2YtamdnZs4ABVZt

npm @budibase/backend-core
Critical
3 months ago

Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist GSA_kwCzR0hTQS03cjlqLXI4NnEtN2c0Nc4ABUtj

npm @budibase/backend-core

Filter by Severity

Moderate 2 Critical 2 High 1