Budibase Server
2 CVEs affecting Budibase Server. Latest disclosed: 2026-08-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73618 | High | 8.3 | 2026-08-13 | Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated… |
CVE-2026-73617 | High | 7.1 | 2026-08-13 | Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied parameters are enriched with handleba… |