How many budibase @budibase/worker CVEs are in CISA KEV?

None of budibase @budibase/worker's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for budibase @budibase/worker vulnerabilities?

Yes — 1 of budibase @budibase/worker's CVEs have a known public exploit.

Which versions of budibase @budibase/worker are affected?

4 distinct budibase @budibase/worker versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in budibase @budibase/worker CVEs?

budibase @budibase/worker's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-913 (Improper Control of Dynamically-Managed Code Resources).

What is the average severity of budibase @budibase/worker CVEs?

The average CVSS base score across budibase @budibase/worker's scored CVEs is 8.8.

budibase @budibase/worker Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: budibase @budibase/worker vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

budibase @budibase/worker Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

budibase @budibase/worker has 2 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

Severity and exploitation

How the CVSS severity of budibase @budibase/worker's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of budibase @budibase/worker's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of budibase @budibase/worker's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every budibase @budibase/worker version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.3.201 CVE
< 3.38.11 CVE

Fixed in

1.3.201 CVE
3.38.11 CVE

Find a version

2 CVEs

Sort

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration
CVE-2026-45716
Patch
CWE-269
High · CVSS 8.8
EPSS 0.5% (39th pct)2026-05-27
Budibase Improper Control of Dynamically-Managed Code Resources vulnerability
CVE-2022-3225
Public exploit
Patch
CWE-913
High · CVSS 8.8
EPSS 1.0% (61th pct)2022-09-16

Common weakness types

The CWE weakness categories most often found in budibase @budibase/worker CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many budibase @budibase/worker CVEs were published each year.

2022

2026

Other budibase products

Browse vulnerabilities for other products by budibase.

budibase91 CVEs @budibase/server34 CVEs server24 CVEs @budibase/backend-core6 CVEs @budibase/bbui1 CVEs budibase/budibase1 CVEs @budibase/builder1 CVEs

All budibase vulnerabilities

Frequently asked questions

Common questions about budibase @budibase/worker vulnerabilities.

How many CVEs does budibase @budibase/worker have?: budibase @budibase/worker has 2 published CVE records since 2022.
How many budibase @budibase/worker CVEs are in CISA KEV?: None of budibase @budibase/worker's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for budibase @budibase/worker vulnerabilities?: Yes — 1 of budibase @budibase/worker's CVEs have a known public exploit.
Which versions of budibase @budibase/worker are affected?: 4 distinct budibase @budibase/worker versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in budibase @budibase/worker CVEs?: budibase @budibase/worker's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-913 (Improper Control of Dynamically-Managed Code Resources).
What is the average severity of budibase @budibase/worker CVEs?: The average CVSS base score across budibase @budibase/worker's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track budibase @budibase/worker vulnerabilities

Get an alert for each new budibase @budibase/worker CVE, with AI-written analysis and remediation steps.

Create an account See pricing