PT-2026-71909

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.40.0 Description A SQL injection issue exists in the Oracle datasource connector during the post-write row lookup process. The system fails to properly escape table names used in identifiers. An attacker with write...

PT-2026-30188

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.33.4 Description Budibase, an open-source low-code platform, contains a server-side request forgery SSRF vulnerability in its REST datasource connector. The platform's SSRF protection is ineffective because the...