@backstage/plugin-scaffolder-backend
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 17 advisory(ies) without a verdict
Advisories (17)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-29gx-h2m3-xw44 Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback | < 4.1.0 | Undetermined |
| GHSA-2g8g-63j4-9w3r RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend | < 0.15.14 | Undetermined |
| GHSA-3x3q-ghcp-whf7 Template Secret leakage in logs in Scaffolder when using `fetch:template` | < 2.1.1 | Undetermined |
| GHSA-4xvq-3m68-h444 Backstage has sensitive information exposure in scaffolder task logs | < 4.1.0 | Undetermined |
| GHSA-7hfw-grcm-cqm6 Backstage: Incorrect authorization in scaffolder task listing | < 4.1.0 | Undetermined |
| GHSA-8qp7-fhr9-fw53 @backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass | < 3.1.4 | Undetermined |
| GHSA-8wq8-6859-qx77 @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint | 3.1.0 – < 3.1.5 | Undetermined |
| GHSA-95p4-vv4g-jxxm Backstage may expose sensitive information in Scaffolder task failure events | < 4.1.0 | Undetermined |
| GHSA-g2v8-7jhw-pp8p Backstage: Sensitive information exposure in Scaffolder | < 3.3.1 ; 3.4.0 – < 3.4.1 ; 4.0.0 – < 4.0.3 ; … | Undetermined |
| GHSA-hmp2-4m7g-22cv Backstage: Scaffolder action input authorization bypass | < 3.3.1 ; 3.4.0 – < 3.4.1 ; 4.0.0 – < 4.0.3 ; … | Undetermined |
| GHSA-mfvq-x7vr-rgqg Backstage: Secret-derived values may be exposed in scaffolder task logs | < 4.1.0 | Undetermined |
| GHSA-mg3m-f475-28hv Path Traversal in @backstage/plugin-scaffolder-backend | < 0.15.14 | Undetermined |
| GHSA-pvv8-8fx9-h673 Path Traversal in @backstage/plugin-scaffolder-backend | 0.9.4 – < 0.15.9 | Undetermined |
| GHSA-rq6q-wr2q-7pgp Backstage has a Possible Symlink Path Traversal in Scaffolder Actions | < 2.2.2 ; 3.0.0 – < 3.0.2 ; 3.1.0 – < 3.1.1 | Undetermined |
| GHSA-vwp5-f99x-x3rq Backstage has improper input validation in scaffolder task list ordering | < 4.1.0 | Undetermined |
| GHSA-wg6p-jmpc-xjmr Backstage Scaffolder plugin has insecure sandbox | < 1.15.0 | Undetermined |
| GHSA-xvgh-hmx8-9xxf Backstage: Improper task state validation in Scaffolder backend | < 4.1.0 | Undetermined |
Sources
| Source | Licence |
|---|