@backstage plugin-scaffolder-backend-module-gitlab güvenlik açıkları (CVE)

@backstage plugin-scaffolder-backend-module-gitlab için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

1 sonuç
6.4Orta
CVE-2026-106462

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

backstage backstage; @backstage plugin-scaffolder-backend; @backstage plugin-scaffolder-backend-module-azure; @backstage plugin-scaffolder-backend-module-bitbucket-cloud

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integra…