Budibase PWA-zip Symlink Arbitrary File Read & Privilege Escalation

github.com 2026-07-02查看中文 →

Security AdvisoryCriticalBudibase

Affected:

@budibase/server <3.39.9

Fixed in:

3.39.9

Referenced CVEs: CVE-2026-54352 · 9.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

xxl-job-admin < 3.4.0 CSRF Vulnerability Allows Unauthorized Glue IDE Script Modification 2026-07-16 NanoMQ v0.24.9 Memory Leak DoS Vulnerability (CVE-2026-36590) with POC 2026-07-16 CVE-2026-36590: EMQ NanoMQ Memory Leak DoS Vulnerability Analysis and Fix 2026-07-16 Dulwich Git Library Truncated Delta Header Parsing Vulnerability 2026-07-16 Sandboxie GuiServer Unrestricted APC Injection Sandbox Escape (RCE) 2026-07-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive