Skip to content
OpenAdvisories

Package · npm

@backstage/backend-app-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2023-6944

    Rhdh: catalog-import function leaks credentials to frontend

    A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, inc…

    Red Hat RHDH-1.1-RHEL-9 @backstage/backend-app-api npm