CVE-2026-64657
1 advisory.
npm/budibase CVE-2026-64657: high 8.4, EPSS 0.45%
budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
Action: Upgrade budibase to 3.39.19 or later.
npm i budibase@3.39.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.39.19 | - |
Fixed versions
| 3.39.19 |
Sources
- osv: GHSA-qqf5-x7mj-v43p
- https://github.com/Budibase/budibase/security/advisories/GHSA-qqf5-x7mj-v43p
- https://github.com/Budibase/budibase
CVE-2026-64657 · published · modified · JSON