A vulnerability has been found in budibase up to 3.38.x and classified as problematic. This affects an unknown function of the file packages/bbui/src/Markdown/MarkdownViewer.svelte. Performing a manipulation results in cross site scripting.
This vulnerability is known as CVE-2026-48149. Remote exploitation of the attack is possible. No exploit is available.
The affected component should be upgraded.
