Skip to content
OpenAdvisories

Package · npm

@backstage/backend-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2024-26150

    `@backstage/backend-common` vulnerable to path traversal through symlinks

    `@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. In `@backstage/backend-common` prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the `resolveSafeChildPat…

    backstage backstage @backstage/backend-common npm