@backstage plugin-search-backend güvenlik açıkları (CVE)

@backstage plugin-search-backend için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

1 sonuç
4.3Orta
CVE-2026-106562

Backstage: Incorrect authorization in search engine permission filtering

backstage backstage; @backstage plugin-search-backend; @backstage plugin-search-backend-module-elasticsearch

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. A…