backstage @backstage/plugin-app-backend vulnerabilities

Latest backstage @backstage/plugin-app-backend CVEs

Newest publication first

1. CVE-2024-47762 Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend

   Published 2024-10-03

   Medium·CVSS 5.8 EPSS 0.41%

   Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.