CVE-2026-103757 - Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
CVE ID :CVE-2026-103757 Published : Oct. 1, 2026, 11:17 a.m. | 2 hours ago Description :Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead...