Skip to content

[GHSA-4qcj-m5wp-jmf4] Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings - #10990

Open
zuhairhalawa wants to merge 1 commit into
github:zuhairhalawa/advisory-improvement-10990from
zuhairhalawa:zuhairhalawa-GHSA-4qcj-m5wp-jmf4
Open

zuhairhalawa wants to merge 1 commit into
github:zuhairhalawa/advisory-improvement-10990from
zuhairhalawa:zuhairhalawa-GHSA-4qcj-m5wp-jmf4

Commits

  1. Commits on Nov 7, 2026