Skip to content
OpenAdvisories

Package · npm

@budibase/backend-core

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-54353

    Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation

    Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before the request is…

    Budibase budibase @budibase/backend-core npm
  • High 8.1
    CVE-2026-42239

    Budibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover

    Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.ts:218. JavaScript can read this cookie via document.cookie.…

    Budibase budibase @budibase/backend-core npm