@backstage plugin-catalog-backend-module-aws vulnerabilities (CVE)

CVE records published for @backstage plugin-catalog-backend-module-aws, newest first. Follow to get an email when a new one appears.

1 results

3.0Low

CVE-2026-106493 1 month ago

Backstage: Cloud storage catalog locations may cross configured storage boundaries

backstage backstage; @backstage plugin-catalog-backend-module-azure; @backstage plugin-catalog-backend-module-aws

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog sourc…