authorization-bypass

• CVE-2026-48151 - Budibase webhook schema auth bypass 2026-06-13
• CVE-2026-53738 - Copy & Delete Posts AJAX privilege escalation 2026-06-11
• CVE-2026-44974 - @hapi/content parameter smuggling upload-filter bypass 2026-06-08