Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/budibase@3.35.10
purl pkg:npm/budibase@3.35.10
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-xh5j-727m-w6gg
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`) ## 1. Summary | Field | … CVE-2026-45061
CVE-2026-45061
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`) | Field | Value | |-------|-------| … GHSA-xh5j-727m-w6gg