CVE-2026-72853

Budibase prior to 3.40.0 is affected by a SQL injection in the Oracle datasource connector’s post-write row lookup, due to failure to escape table names in identifiers. An attacker with write access on a table whose name contains a double-quote can inject SQL that executes as the datasource’s dat...

io.github.regychang:flinkify-flink-core (>=0.2.1 <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-oracle-cdc (=3.2.0)

org.apache.flink:flink-connector-oracle-cdc MAVEN version =3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-connector-oracle-cdc and may be impacted: - io.github.regychang:flinkify-flink-core =0.2.1, =0.2.2 Source cves:...