Skip to content
OpenAdvisories

Package · npm

@backstage/integration

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.7
    CVE-2026-29185

    @backstage/integration: Potential reading of SCM URLs using built in token

    Backstage is an open framework for building developer portals. Prior to version 1.20.1, a vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal sequences in encoded form to be included in file paths. When these URLs were p…

    backstage backstage @backstage/integration npm