Skip to content

Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour

Moderate severity GitHub Reviewed Published May 14, 2026 in Budibase/budibase

No open alerts for this advisory

Give feedback on Dependabot alerts