CVE-2026-54350 - Budibase: Anonymous NoSQL operator injection via published-app query templates
CVE ID :CVE-2026-54350 Published : June 26, 2026, 8:44 p.m. | 4 hours, 27 minutes ago Description :Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor of any published Budibase app reads every document of the backing MongoDB, CouchDB, Elasticsearch,...