# sonatype-2026-005068

@budibase/server - SQL Injection

Published Jul 25, 2026

[Advisory · GHSA-2xgg-r2wc-c5r2](https://github.com/advisories/GHSA-2xgg-r2wc-c5r2)

## Security Details

### Components Impacted

Sonatype Research

### sonatype-2026-005068 Security Details

- **CVE ID:** sonatype-2026-005068  
- **CVE Description:** @budibase/server - SQL Injection  
- **Published:** Jul 25, 2026  
- **CVSS Score & Severity:** 7.6 High  
- **CVSS Vector:** CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H  
- **EPSS Score:** 0%  
- **Malware:** malware  
- **KEV Status:** Not in KEV Catalog: No known exploits  
- **Affected Ecosystems:** affected  
- **Source:** Sonatype

### References

[GitHub · Advisory · GHSA-2xgg-r2wc-c5r2](https://github.com/advisories/GHSA-2xgg-r2wc-c5r2 "https://github.com/advisories/GHSA-2xgg-r2wc-c5r2")