Skip to content

Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication

Critical severity GitHub Reviewed Published Feb 2, 2026 in maziggy/bambuddy • Updated Feb 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts