CVE-2026-73308
1 advisory.
npm/@budibase/server CVE-2026-73308: medium 5.7, EPSS 0.41%
Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.38.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gh4h-34gr-87r7
- https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7
- https://github.com/Budibase/budibase/pull/19107
- https://github.com/Budibase/budibase/commit/bca426de7dc36d680285295655dc640dea2aab21
- https://github.com/Budibase/budibase
- https://github.com/Budibase/budibase/releases/tag/3.39.25
CVE-2026-73308 · published · modified · JSON