Budibase vulnerabilities

51 known CVE vulnerabilities in Budibase, translated and rated.

CVE-2026-25043Medium
Budibase prior to version 3.23.25 lacks rate limiting or CAPTCHA on the password reset endpoint. An unauthenticated attacker can repeatedly trigger password reset requests for the same email, flooding the inbox with hundreds of emails.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS