Skip to content

Product

backstage @backstage/backend-app-api vulnerabilities

1 published CVE affecting backstage @backstage/backend-app-api, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest backstage @backstage/backend-app-api CVEs

Newest publication first

  1. CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend

    Published
    MediumCVSS 5.7 EPSS 0.56%

    A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.