linuxfoundation backstage/backend-defaults Schwachstellen (CVE)

Für linuxfoundation backstage/backend-defaults veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

4 Ergebnisse
4.4Mittel
CVE-2026-106494

Backstage: Improper input validation in cloud storage URL readers

backstage backstage; @backstage backend-defaults

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Back…

3.0Niedrig
CVE-2026-106493

Backstage: Cloud storage catalog locations may cross configured storage boundaries

backstage backstage; @backstage plugin-catalog-backend-module-azure; @backstage plugin-catalog-backend-module-aws

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog sourc…