Skip to content

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

Critical severity GitHub Reviewed Published Jun 4, 2026 in Budibase/budibase • Updated Aug 12, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts