IA Squad
SearchPT

@budibase/backend-core

js · @budibase/backend-coreCritical

@budibase/backend-core CSRF bypass via unanchored route regex

The buildMatcherRegex() and matches() functions in packages/backend-core/src/middleware/matchers.

13 Jun 2026 · act now