Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-auth-backend

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    XSS vulnerability in @backstage/plugin-auth-backend

    Backstage is an open platform for building developer portals. In affected versions the auth-backend plugin allows a malicious actor to trick another user into visiting a vulnerable URL that executes an XSS attack. This attack can potentially allow the attacke…