Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-permission-backend

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-32791

    Permission policy information leakage in Backstage permission system

    The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in the Backstage permission plugin backend allows callers to extract some information about the conditional decisions returned by the permissio…

    backstage backstage @backstage/plugin-permission-backend npm