Backstage vulnerabilities
73 CVEs and advisories name Backstage as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-47762Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend
- CVE-2024-45815Prototype pollution in @backstage/plugin-catalog-backend
- CVE-2024-45816Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend
- CVE-2024-46976Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend
- CVE-2024-26150`@backstage/backend-common` vulnerable to path traversal through symlinks
- CVE-2023-35926Insecure sandbox in Backstage Scaffolder plugin
- CVE-2023-25571Backstage has XSS Vulnerability in Software Catalog
- CVE-2021-43783Path Traversal in @backstage/plugin-scaffolder-backend
- CVE-2021-43776XSS vulnerability in @backstage/plugin-auth-backend
- CVE-2021-41151Path Traversal in @backstage/plugin-scaffolder-backend
- CVE-2021-32662TechDocs mkdocs.yml path traversal
- CVE-2021-32661TechDocs object element script injection
- CVE-2021-32660TechDocs content sanitization bypass