Skip to content
OpenAdvisories

Vendor

backstage

73 known vulnerabilities.

Products

backstage 69 plugin-scaffolder-backend 10 plugin-techdocs-node 8 plugin-catalog-backend 3 backend-defaults 3 plugin-kubernetes-backend 3 plugin-auth-backend 2 plugin-techdocs-backend 2 plugin-scaffolder-backend-module-confluence-to-markdown 2 plugin-proxy-backend 2 plugin-scaffolder-backend-module-bitbucket-cloud 2 plugin-scaffolder-backend-module-bitbucket-server 2 plugin-catalog-backend-module-azure 1 plugin-catalog-backend-module-aws 1 plugin-auth-backend-module-cloudflare-access-provider 1 plugin-catalog-backend-module-unprocessed 1 plugin-catalog-unprocessed-entities 1 plugin-catalog-unprocessed-entities-common 1 plugin-search-backend 1 plugin-search-backend-module-elasticsearch 1 plugin-auth-node 1 plugin-catalog-backend-module-bitbucket-server 1 plugin-scaffolder-backend-module-sentry 1 plugin-catalog-backend-module-gitlab 1 plugin-scaffolder-backend-module-azure 1 plugin-scaffolder-backend-module-github 1 plugin-scaffolder-backend-module-gitlab 1 plugin-auth-backend-module-oidc-provider 1
All Critical High Medium Low Exploited only Public exploit

41 results · Clear filters · Feed

  • Medium 6.8
    CVE-2021-32660

    TechDocs content sanitization bypass

    Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of `@backstage/tehdocs-common` prior to 0.6.4, a malicious internal actor is able to upload documentation c…

    backstage backstage @backstage/techdocs-common npm