Skip to content
OpenAdvisories

Package · npm

@backstage/cli-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-24047

    @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass

    Backstage is an open framework for building developer portals, and @backstage/cli-common provides config loading functionality used by the backend and command line interface of Backstage. Prior to version 0.1.17, the `resolveSafeChildPath` utility function in…

    backstage backstage @backstage/cli-common npm