PT-2026-69888

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy is a self-hostable Platform as a Service PaaS. The database service deployment functions within mariadb.ts, mongo.ts, mysql.ts, postgres.ts, redis.ts, and libsql.ts pass the user-controlled...

CVE-2026-25041: Improper Neutralization of Special Elements used in an OS Command

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values database name, host, password, etc. without proper sanitization. The password and other...