Budibase Pre-Auth Credential Leakage: MongoDB/Firebase Secrets Exposed in API Responses

github.com 2026-08-14查看中文 →

Security AdvisoryHighBudibase

Affected:

Budibase < 3.40.0

Fixed in:

3.40.0

Referenced CVEs: CVE-2026-72857 · 7.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Orange View DualSafe Chrome Extension postMessage Origin Validation Flaw Leads to Credential Exposure 2026-08-17 AdBlock for YouTube 7.2.1 Unauth DOM Event Validation Leads to Persistent Ad-Blocker Bypass 2026-08-17 Alaev SEO Tools Chrome Extension HTML Injection in Popup 2026-08-17 SSRF Vulnerability in mcp-florence2 OCR and Caption Tools 2026-08-17 TP-Link Router RCE Vulnerability Advisory (CVE-issues) and Remediation 2026-08-17

Offline Archive

Offline screenshot & PDF are Pro-exclusive