This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Suriq - Always on Watch
suriq.io
did:plc:6vjp7fbgz5ductueireifliv
A single Budibase app builder can read every secret on your server.
A rigged app-icon upload exposes the master keys, forges an admin token, and reaches every workspace.
Self-hosted? Update to 3.39.9 and rotate secrets. (CVE-2026-54352)
https://suriq.io/blog/budibase-pwa-zip-symlink-file-read
2026-06-23T00:12:27.160Z