budibase

v3.39.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 7d Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-app-builder ai-applications crud-app crud-application data-application data-apps

+12 more

internal-tools it-workflows low-code low-code-no-code low-code-platform no-code no-code-platform rest-api-framework sql-gui workflow-apps workflow-automation workflow-engine

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 7d

Version 3.39.2 enforces authentication for all S3 signed upload URLs.

Why it matters: Auth enforcement mitigates unauthorized data uploads; upgrade to 3.39.2 immediately if using signed URL generation.

Summary

AI summary

Require authentication for S3 signed upload URLs.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Require auth for S3 signed upload URLs Require auth for S3 signed upload URLs Source: llm_adapter@2026-05-27 Confidence: high	—
Feature
Feature	Low	Add Rag metrics capability Add Rag metrics capability Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Add SQL query pagination support Add SQL query pagination support Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Add bb AI chat functionality Add bb AI chat functionality Source: llm_adapter@2026-05-27 Confidence: high	—
Bugfix	Medium	Buffer responses to avoid premature close errors in server Buffer responses to avoid premature close errors in server Source: llm_adapter@2026-05-27 Confidence: high	—

Full changelog

What's Changed

[Security] Require auth for S3 signed upload URLs by @PClmnt in https://github.com/Budibase/budibase/pull/18774
Response buffering to avoid premature close errors in server by @calexiou in https://github.com/Budibase/budibase/pull/18849
Rag metrics by @adrinr in https://github.com/Budibase/budibase/pull/18631
SQL Query pagination by @poirazis in https://github.com/Budibase/budibase/pull/18839
Add bb ai chat by @ConorWebb96 in https://github.com/Budibase/budibase/pull/18848

Full Changelog: https://github.com/Budibase/budibase/compare/3.39.1...3.39.2

Security Fixes

Require auth for S3 signed upload URLs (Security enhancement)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track budibase

Get notified when new releases ship.

About budibase

AI agents that run your operations. Model agnostic.

All releases →