sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
## Summary `sm-crypto` (npm package **0.4.0**, the latest release, published 2026-01-20) generates SM2 private keys and
#npm
共收录 1041 条相关情报。
← 返回所有主题@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion
### Summary `@anephenix/hub` starts a `setInterval` polling loop for every incoming WebSocket connection to request a c
Budibase: SSRF via bare fetch() in uploadUrl during AI table generation
# Budibase: SSRF via bare fetch() in uploadUrl during AI table generation ## Summary The `uploadUrl()` function in `pa
Budibase: SSRF via DNS rebinding in the REST datasource integration
### Summary Budibase's central outbound-fetch guard (`fetchWithBlacklist`) prevents SSRF/DNS-rebinding by resolving the
Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete
## Summary An end-user injection in Budibase's MongoDB datasource lets any BASIC app user bypass the builder's query-le
Budibase: Account Enumeration via Login Lockout Response Differential
## Summary The login lockout mechanism in Budibase creates an observable response discrepancy that allows unauthenticat
Budibase: Chat-Link Handoff Identity Confusion (Same-Tenant Account-Link CSRF)
### Summary The Budibase AI chat-link handoff flow (`GET/POST /api/chat-links/:instance/:token/handoff`) binds an **ext
Budibase: MySQL DESCRIBE Backtick Injection via multipleStatements in Database Connector
### Summary **This is a related but independently fixable vulnerability to GHSA-qqf5-x7mj-v43p (PostgreSQL SQL injection
Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution
## Summary Budibase's MongoDB query execution endpoint (`POST /api/v2/queries/:queryId`) is vulnerable to NoSQL injecti
Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
## Summary When an SSO-authenticated user tests an automation in the Budibase builder, their OAuth2 access token and re
Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint
#### Summary The Budibase Worker service exposes a public, unauthenticated API endpoint (`GET /api/global/users/tenant/:
Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak
## Summary Budibase attaches a REST datasource's stored credentials (Bearer/Basic tokens and static headers) to an outgo
Budibase: OIDC SSO account takeover: incoming identity linked by email without checking email_verified
### Summary Budibase's OIDC SSO login links an incoming SSO identity to an existing Budibase account **by email address
Budibase: DNS rebinding SSRF bypasses remain in OpenAPI import and REST query execution
## Impact A builder-level user can make Budibase issue server-side HTTP requests to loopback or private-network targets
Budibase: S3 presigned URL endpoint authorization regression in v3.39.4 allows BASIC users to obtain S3 PutObject presigned URLs
## Impact In Budibase v3.39.4, a regression in the authorization level for the S3 attachment upload endpoint allows any
Budibase: Server Filesystem Existence/Read Oracle via Builder-Controlled MongoDB tlsCertificateKeyFile
## Summary When creating a MongoDB datasource, Budibase passes the `tlsCertificateKeyFile` and `tlsCAFile` fields straig
Budibase: SQL Injection via `multipleStatements: true`
## Summary A critical SQL injection vulnerability was discovered in Budibase's MySQL integration that allows remote atta
Budibase: Email Change IDOR via POST /api/v2/email allows full Account Takeover (accountId not validated against session)
## Summary `POST /api/v2/email` on the account portal (`account.budibase.app`) starts an email-change workflow using a
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
## Summary The `/api/users/metadata` and `/api/users/metadata/:id` endpoints in `@budibase/server` return full global u
Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings
## Summary The `GET /api/global/groups` endpoint on the worker service has no role-based authorization middleware. Any