@backstage/plugin-auth-backend
A Backstage backend plugin that handles authentication
Security Advisories for @backstage/plugin-auth-backend in npm
Moderate
8 days ago
@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass
npm
@backstage/plugin-auth-backend
Low
5 months ago
@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch
npm
@backstage/plugin-auth-backend
Moderate
5 months ago
@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass
npm
@backstage/plugin-auth-backend
Potential
Low
12 months ago
Template Secret leakage in logs in Scaffolder when using `fetch:template`
npm
@backstage/plugin-scaffolder-backend
Potential
Moderate
over 1 year ago
Permission policy information leakage in Backstage permission system
npm
@backstage/plugin-permission-backend
Potential
Moderate
over 1 year ago
Backstage Scaffolder plugin vulnerable to Server-Side Request Forgery
npm
@backstage/plugin-scaffolder-node
Potential
Moderate
almost 2 years ago
Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend
npm
@backstage/plugin-app-backend
Potential
Moderate
almost 2 years ago
@backstage/plugin-techdocs-backend vulnerable to circumvention of cross site scripting protection
npm
@backstage/plugin-techdocs-backend
Potential
High
almost 2 years ago
@backstage/plugin-catalog-backend Prototype Pollution vulnerability
npm
@backstage/plugin-catalog-backend
Potential
High
over 2 years ago
@backstage/backend-app-api leaks GitLab access tokens
npm
@backstage/backend-app-api
Potential
High
about 3 years ago
Backstage Scaffolder plugin has insecure sandbox
npm
@backstage/plugin-scaffolder-backend
Potential
Moderate
about 4 years ago
Path traversal for local publishers in TechDocs backend
npm
@backstage/techdocs-common, @backstage/plugin-techdocs-node
High
over 4 years ago
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
npm
@backstage/plugin-auth-backend
Potential
High
over 4 years ago
RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend
npm
@backstage/plugin-scaffolder-backend
Potential
High
over 4 years ago
Path Traversal in @backstage/plugin-scaffolder-backend
npm
@backstage/plugin-scaffolder-backend
Potential
Moderate
almost 5 years ago
Path Traversal in @backstage/plugin-scaffolder-backend
npm
@backstage/plugin-scaffolder-backend
Potential
Potential
Potential