GHSA-3GP5-Q4JW-3V94 Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL

Summary Budibase stores external REST datasource credentials server-side and documents that database credentials are applied server-side and are not exposed in the UI. The REST datasource implementation redacts stored Basic/Bearer/OAuth2 auth secrets before returning datasource data to clients...

EUVD-2026-32588

Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL...

GHSA-45QJ-4XQ3-3C45

creationtimestamp| type| source ---|---|--- 2026-06-12 18:22:18+00:00| seen| https://gist.github.com/sandh0t/45fdee24a7907e0cd836aed26f2d5a7a...

CVE-2026-48059

creationtimestamp| type| source ---|---|--- 2026-06-12 18:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4e52jd2l23 2026-06-15 02:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sjgcn32d...

CVE-2026-45832

creationtimestamp| type| source ---|---|--- 2026-06-12 18:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dwdinmm2f...

CVE-2026-48006

creationtimestamp| type| source ---|---|--- 2026-06-12 18:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dkybdiu2q 2026-06-15 02:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc6sby6di2n 2026-07-10 15:58:20+00:00| seen|...

CVE-2026-50083

creationtimestamp| type| source ---|---|--- 2026-06-12 18:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dg3cyib2f...

CVE-2026-45833

creationtimestamp| type| source ---|---|--- 2026-06-12 18:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4dbluklu2x 2026-09-02 01:00:15+00:00| seen| Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is 2026-09-03 00:00:38+00:00| published-proof-of-concept|...

CVE-2026-50091

creationtimestamp| type| source ---|---|--- 2026-06-12 18:02:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4d5hgzj62p...

CVE-2026-53806

creationtimestamp| type| source ---|---|--- 2026-06-12 18:01:30+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo4d43ws2e2n 2026-06-14 17:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamlxetc2l...

CVE-2026-45831

creationtimestamp| type| source ---|---|--- 2026-06-12 18:00:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4czl2rkz2j...

CVE-2026-45830

creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...

CVE-2026-50088

creationtimestamp| type| source ---|---|--- 2026-06-12 17:36:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4bppdfds2q...

CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

CVE-2026-50009

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless reset token on the network path when using the default HMAC-based connection-ID and stateless-reset-token generators. The reset token for the...

CVE-2026-54133

creationtimestamp| type| source ---|---|--- 2026-06-12 16:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44g5a3ue2n 2026-06-12 18:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4eeqak4c2t 2026-06-15 19:07:08+00:00| seen|...

CVE-2026-53787

creationtimestamp| type| source ---|---|--- 2026-06-12 16:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44fvvomc26 2026-06-14 23:15:44+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvlueltg25 2026-06-15 16:28:58+00:00| seen|...

CVE-2026-6853

creationtimestamp| type| source ---|---|--- 2026-06-12 16:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44dzous22q 2026-06-12 17:26:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4b5scnsk2l 2026-06-14 23:15:37+00:00| seen|...

GHSA-8HG8-63C5-GWMX

creationtimestamp| type| source ---|---|--- 2026-06-12 16:00:32+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mo44dsnzdc2y...

CVE-2026-9641

creationtimestamp| type| source ---|---|--- 2026-06-12 15:53:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo43x72deo2v 2026-06-12 18:39:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4f7m6z7522 2026-06-14 10:48:56+00:00| seen|...