Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-scaffolder-node

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-53983

    Server-side request forgery in Backstage Scaffolder plugin

    The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backstage Scaffolder template functionality where Server-Side Template Injection (SSTI) can be exploited to perform Git config…

    backstage backstage @backstage/plugin-scaffolder-node npm