CVE-2026-48153

Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplied URL with plain node-fetch, skipping the blacklist.isBlacklisted check that every other outbound fetch path in the codebase uses. The Joi schema for the OAuth2 URL has no scheme or host restriction. This vulnerability is fixed in 3.39.0.

• CWE-918

• https://github.com/Budibase/budibase/security/advisories/GHSA-4q6h-8p4v-67vq
• https://github.com/Budibase/budibase/security/advisories/GHSA-4q6h-8p4v-67vq

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48148Budibase is an open-source low-code platform. Prior to 3.35.…5.3
• CVE-2026-48149Budibase is an open-source low-code platform. Prior to 3.39.…8.1
• CVE-2026-4815A SQL Injection vulnerability has been found in Support Boar…8.8
• CVE-2026-48150Budibase is an open-source low-code platform. Prior to 3.39.…9
• CVE-2026-48151Budibase is an open-source low-code platform. Prior to 3.39.…7.5
• CVE-2026-48152Budibase is an open-source low-code platform. Prior to 3.39.…8.1
• CVE-2026-48154GoRest is a Golang starter kit built with the Gin framework …5.9
• CVE-2026-48155pypdf is a free and open-source pure-python PDF library. Pri…5.5
• CVE-2026-48156pypdf is a free and open-source pure-python PDF library. Pri…3.3
• CVE-2026-48157Slim is a PHP micro framework that enables users to write si…6.1
• CVE-2026-48158use-context-selector is a React useContextSelector hook in u…9.3
• CVE-2026-48159use-reducer-async is a React useReducer with async actions. …9.3