{"api_version":"v1","generated_at":"2026-10-07T16:05:00+00:00","product":{"cve_count":24,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-budibase-server-ea9630475904","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/server","name":"server","next_cursor":null,"observations":[{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100688","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100688","fixed":"server: 3.45.0","last_modified":"2026-09-28T16:38:07.249Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-4946-qf2m-wrh5","primary_source":"","published":"2026-09-26T13:23:48.061Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100687","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100687","fixed":"server: 3.45.0","last_modified":"2026-09-28T17:53:26.290Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-rmv5-3xpj-w885","primary_source":"","published":"2026-09-26T13:23:47.369Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100686","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100686","fixed":"server: 3.45.0","last_modified":"2026-09-30T15:03:35.390Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-pp5r-q4fp-mcj3","primary_source":"","published":"2026-09-26T13:23:46.674Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100685","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100685","fixed":"server: 3.45.0","last_modified":"2026-09-30T17:09:00.076Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-76m3-47v8-p7h6","primary_source":"","published":"2026-09-26T13:23:45.934Z"},{"affected":"server: 3.41.0 < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100684","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100684","fixed":"server: 3.45.0","last_modified":"2026-09-28T16:36:39.716Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-35ch-57g2-3g98","primary_source":"","published":"2026-09-26T13:23:45.225Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100683","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100683","fixed":"server: 3.45.0","last_modified":"2026-09-28T17:57:00.279Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-ppj8-hmx2-m546","primary_source":"","published":"2026-09-26T13:23:44.523Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100682","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100682","fixed":"server: 3.45.0","last_modified":"2026-09-30T15:01:39.218Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-37r6-5jxh-vm83","primary_source":"","published":"2026-09-26T13:23:43.846Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100681","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100681","fixed":"server: 3.45.0","last_modified":"2026-09-30T17:39:28.406Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-942w-fccr-8r3c","primary_source":"","published":"2026-09-26T13:23:43.143Z"},{"affected":"server: < 3.45.0","affected_versions_present":true,"cve_id":"CVE-2026-100680","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-100680","fixed":"server: 3.45.0","last_modified":"2026-09-28T16:34:04.548Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-8xr5-pggf-26jq","primary_source":"","published":"2026-09-26T13:23:42.415Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82246","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82246","fixed":"3.41.3","last_modified":"2026-08-28T14:45:27.847Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-48x3-9ph2-p9gj","primary_source":"","published":"2026-08-28T10:49:32.768Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82245","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82245","fixed":"3.41.3","last_modified":"2026-08-28T15:52:50.059Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-4wr8-5c3p-rjcr","primary_source":"","published":"2026-08-28T10:49:32.098Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82244","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82244","fixed":"3.41.3","last_modified":"2026-08-28T15:40:15.664Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-gwr2-pgg3-p7xp","primary_source":"","published":"2026-08-28T10:49:31.426Z"},{"affected":"server: < 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82243","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82243","fixed":"server: 3.41.3","last_modified":"2026-08-31T18:31:42.022Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-83m5-fvmg-r7xv","primary_source":"","published":"2026-08-28T10:49:30.744Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82242","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82242","fixed":"3.41.3","last_modified":"2026-08-28T14:02:53.417Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-xqpq-288m-r5q7","primary_source":"","published":"2026-08-28T10:49:30.049Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82241","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82241","fixed":"3.41.3","last_modified":"2026-08-28T14:46:56.389Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-9754-4wm6-3c8r","primary_source":"","published":"2026-08-28T10:49:29.355Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82240","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82240","fixed":"3.41.3","last_modified":"2026-08-28T15:52:56.424Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-468g-55qj-v8rr","primary_source":"","published":"2026-08-28T10:49:28.683Z"},{"affected":"< 3.41.3","affected_versions_present":true,"cve_id":"CVE-2026-82239","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82239","fixed":"3.41.3","last_modified":"2026-08-28T15:44:26.965Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-vq3j-xwg3-pg8x","primary_source":"","published":"2026-08-28T10:49:28.004Z"},{"affected":"3.39.4 < 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-72859","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72859","fixed":"3.40.0","last_modified":"2026-08-14T14:39:41.739Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-xcx6-4f2g-hhgx","primary_source":"","published":"2026-08-14T11:35:43.574Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-72855","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72855","fixed":"3.40.0","last_modified":"2026-08-14T16:21:40.818Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-xg5g-26x8-cvf4","primary_source":"","published":"2026-08-13T21:54:44.625Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-72851","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72851","fixed":"3.40.0","last_modified":"2026-08-14T19:02:13.105Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-x7h8-ww3q-xv7c","primary_source":"","published":"2026-08-13T21:54:43.318Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-72850","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72850","fixed":"3.40.0","last_modified":"2026-08-14T16:14:04.242Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-pxwc-66g3-5f27","primary_source":"","published":"2026-08-13T21:54:42.651Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-72849","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-72849","fixed":"3.40.0","last_modified":"2026-08-17T16:09:46.969Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-pvcr-8mvp-w8qr","primary_source":"","published":"2026-08-13T21:54:41.963Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-73618","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73618","fixed":"3.40.0","last_modified":"2026-08-13T12:55:04.134Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-qw6m-8fw2-2v64","primary_source":"","published":"2026-08-13T11:28:19.923Z"},{"affected":"< 3.40.0","affected_versions_present":true,"cve_id":"CVE-2026-73617","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73617","fixed":"3.40.0","last_modified":"2026-08-14T18:10:25.783Z","patch_url":"https://github.com/Budibase/budibase/security/advisories/GHSA-pmpg-2mxq-6xwr","primary_source":"","published":"2026-08-13T11:28:19.219Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"budibase"}}