{"action":"Upgrade @budibase/bbui to 1.3.20 or later.","affected":[{"fixed":"1.3.20","introduced":"0"}],"component":"@budibase/bbui","cve_ids":["CVE-2022-3225"],"ecosystem":"npm","epss":0.00959,"exploited":false,"fixed_versions":["1.3.20"],"ghsa_id":"GHSA-x92g-49gh-63qm","id":"tcs_01M5KGHEZSSBQVQH7QES94EBT3","modified_at":"2026-02-28T06:27:28.430103Z","published_at":"2022-09-17T00:00:34Z","references":["https://osv.dev/vulnerability/GHSA-x92g-49gh-63qm","https://nvd.nist.gov/vuln/detail/CVE-2022-3225","https://github.com/budibase/budibase/commit/d35864be0854216693a01307f81ffcabf6d549df","https://github.com/Budibase/budibase/releases/tag/v1.3.20","https://github.com/budibase/budibase","https://huntr.dev/bounties/a13a56b7-04da-4560-b8ec-0d637d12a245"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-x92g-49gh-63qm#npm/@budibase/bbui","url":"https://osv.dev/vulnerability/GHSA-x92g-49gh-63qm"}],"summary":"Budibase Improper Control of Dynamically-Managed Code Resources vulnerability"}