How many budibase @budibase/server CVEs are in CISA KEV?

None of budibase @budibase/server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of budibase @budibase/server are affected?

23 distinct budibase @budibase/server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in budibase @budibase/server CVEs?

budibase @budibase/server's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-862 (Missing Authorization), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical budibase @budibase/server vulnerabilities are there?

budibase @budibase/server has 7 critical and 20 high-severity CVEs.

What is the average severity of budibase @budibase/server CVEs?

The average CVSS base score across budibase @budibase/server's scored CVEs is 7.7.

budibase @budibase/server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: budibase @budibase/server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

budibase @budibase/server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

budibase @budibase/server has 34 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 30 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting budibase @budibase/server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of budibase @budibase/server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High20

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of budibase @budibase/server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

30 of budibase @budibase/server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every budibase @budibase/server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.38.112 CVEs
< 3.39.07 CVEs
< 3.33.43 CVEs
< 3.38.13 CVEs
< 3.39.92 CVEs
< 3.23.321 CVE
< 3.34.81 CVE
< 3.35.31 CVE
< 3.39.121 CVE
< 3.39.21 CVE
< 3.39.251 CVE
< 3.41.31 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in budibase @budibase/server CVEs. Follow any weakness for its full explanation.

Other budibase products

Browse vulnerabilities for other products by budibase.

budibase81 CVEs server15 CVEs @budibase/backend-core6 CVEs @budibase/worker2 CVEs @budibase/bbui1 CVEs budibase/budibase1 CVEs @budibase/builder1 CVEs

All budibase vulnerabilities

Frequently asked questions

Common questions about budibase @budibase/server vulnerabilities.

How many CVEs does budibase @budibase/server have?: budibase @budibase/server has 34 published CVE records since 2026.
How many budibase @budibase/server CVEs are in CISA KEV?: None of budibase @budibase/server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for budibase @budibase/server vulnerabilities?: Yes — 30 of budibase @budibase/server's CVEs have a known public exploit.
Which versions of budibase @budibase/server are affected?: 23 distinct budibase @budibase/server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in budibase @budibase/server CVEs?: budibase @budibase/server's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-862 (Missing Authorization), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical budibase @budibase/server vulnerabilities are there?: budibase @budibase/server has 7 critical and 20 high-severity CVEs.
What is the average severity of budibase @budibase/server CVEs?: The average CVSS base score across budibase @budibase/server's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track budibase @budibase/server vulnerabilities

Monitor new budibase @budibase/server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing