@backstage backend-defaults güvenlik açıkları (CVE)

@backstage backend-defaults için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
4.3Orta
CVE-2026-106495

Backstage: Improper access control in backend action invocation

backstage backstage; @backstage backend-defaults

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper access control in backend action invocation. An authenticated user could invoke actions that an operator had exclud…

4.4Orta
CVE-2026-106494

Backstage: Improper input validation in cloud storage URL readers

backstage backstage; @backstage backend-defaults

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Back…