https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:23:22.288625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343694 EUVD-2026-343694 2026-10-07T14:23:22.354369+00:00 EUVD-2026-343694 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67311 fkie_cve-2026-67311 2026-10-07T14:23:22.354415+00:00

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to internal IP addresses, bypassing blacklist protection to access cloud metadata endpoints and internal services.

 https://cve.radiocsirt.org/vuln/ghsa-9v65-w6j3-v2w8 GHSA-9v65-w6j3-v2w8 2026-10-07T14:23:22.354477+00:00

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to internal IP addresses, bypassing blacklist protection to access cloud metadata endpoints and internal services.