CVE-2026-54356: Missing Authorization

Budibase is an open-source low-code platform. Prior to 3.41.3, POST /api/attachments/:datasourceId/url in packages/server/src/api/routes/static.ts and packages/server/src/api/controllers/static/index.ts allows an authenticated published-app user with the BASIC role to supply attacker-controlled...

PT-2014-5425

Name of the Vulnerable Software and Affected Versions OpenStack Identity Keystone versions prior to 2013.2.3 OpenStack Identity Keystone versions 2014.1 prior to 2014.1.2.1 Description The issue allows remote authenticated users to read sensitive configuration options via a crafted endpoint. This...