Entrar Obtener clave API

Vulnerabilidades de linuxfoundation backstage/plugin-scaffolder-backend-module-gitlab (CVE)

Registros CVE publicados para linuxfoundation backstage/plugin-scaffolder-backend-module-gitlab, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

6.4Media

CVE-2026-106462 hace 1 mes

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

backstage backstage; @backstage plugin-scaffolder-backend; @backstage plugin-scaffolder-backend-module-azure; @backstage plugin-scaffolder-backend-module-bitbucket-cloud

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integra…