CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

EUVD-2026-32595

Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets at packages/server/src/sdk/workspace/datasources/datasources.ts masks only datasource config fields whose schema type is DatasourceFieldType.PASSWORD. The Snowflake integration types its privateKey field as...