linuxfoundation backstage/plugin-catalog-backend-module-gitlab vulnerabilities (CVE)

CVE records published for linuxfoundation backstage/plugin-catalog-backend-module-gitlab, newest first. Follow to get an email when a new one appears.

1 results

5.4Medium

CVE-2026-106463 1 month ago

Backstage: Improper authorization in GitLab organizational user ingestion

backstage backstage; @backstage plugin-catalog-backend-module-gitlab

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organizati…