Skip to content

budibase

v3.40.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-app-builder ai-applications crud-app crud-application data-application data-apps
+12 more
internal-tools it-workflows low-code low-code-no-code low-code-platform no-code no-code-platform rest-api-framework sql-gui workflow-apps workflow-automation workflow-engine

Affected surfaces

auth crypto_tls

Summary

AI summary

Security fix limits PWA zip depth and size, removes multiple operations feature flags.

Full changelog

What's Changed

  • feat: delete old backups by @Dakuan in https://github.com/Budibase/budibase/pull/19186
  • Remove multiple operations feature flags by @adrinr in https://github.com/Budibase/budibase/pull/19237
  • Allow automations to run in preview by @melohagan in https://github.com/Budibase/budibase/pull/19179
  • feat: sharepoint lists by @Dakuan in https://github.com/Budibase/budibase/pull/19195
  • Security fix: limit pwa zip depth - size by @calexiou in https://github.com/Budibase/budibase/pull/19208
  • Feat/credentials update respect on change by @calexiou in https://github.com/Budibase/budibase/pull/19007
  • Verify SMTP server TLS certificate by default by @leonacostaok in https://github.com/Budibase/budibase/pull/19148

New Contributors

  • @leonacostaok made their first contribution in https://github.com/Budibase/budibase/pull/19148

Full Changelog: https://github.com/Budibase/budibase/compare/3.39.32...3.40.0

Breaking Changes

  • Removed multiple operations feature flags

Security Fixes

  • Security fix: limit PWA zip depth and size

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track budibase

Get notified when new releases ship.

Sign up free

About budibase

AI agents that run your operations. Model agnostic.

All releases →

Related context

Beta — feedback welcome: [email protected]