Threats tagged 'ghsa-qhcg-hgqm-ww52'

CVE-2026-100687 is a vulnerability in Budibase Server versions before 3.45.0 where plaintext datasource credentials are exposed to unauthorized actors. This occurs because the server fails to redact sensitive information such as database passwords and API keys before broadcasting external table updates to the Builder collaboration websocket room. Attackers with Builder access can intercept these unredacted credentials during table save or delete operations.