10479 matches found
CVE-2025-55285
The CVE-2025-55285 issue affects the Backstage scaffolder-backend plugin. Before version 2.1.1, the fetch:template action could duplicate the input log path, causing some secrets passed via the {{ secrets }} bag to be written to logs instead of being redacted. Affected product: @backstage/plugin-...
CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
CVE-2025-8761
A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2025-33503 · Backstage · @Backstage/Plugin-Scaffolder-Backend
Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 2.1.1 Description: The backend for the default Backstage software templates exhibited duplicate logging of input values in the fetch:template action within the Scaffolder. This resulted i...
Malicious code in morda-backend (npm)
The package morda-backend was found to contain malicious code...
Malicious code in puppeteer-dactyl-backend-zenith (npm)
The package puppeteer-dactyl-backend-zenith was found to contain malicious code...
Malicious code in cofarte-backend (npm)
The package cofarte-backend was found to contain malicious code...
Malicious code in apiportal-backend (npm)
The package apiportal-backend was found to contain malicious code...
Malicious code in triggerator-backend (npm)
The package triggerator-backend was found to contain malicious code...
Malicious code in gfsni-backend (npm)
The package gfsni-backend was found to contain malicious code...
Malicious code in gemini-resolvers-superagent-backend (npm)
The package gemini-resolvers-superagent-backend was found to contain malicious code...
MAL-2025-21258 Malicious code in gemini-resolvers-superagent-backend (npm)
The package gemini-resolvers-superagent-backend was found to contain malicious code...
MAL-2025-32596 Malicious code in s4-node-test-backend (npm)
The package s4-node-test-backend was found to contain malicious code...
MAL-2025-20031 Malicious code in example-backend-next (npm)
The package example-backend-next was found to contain malicious code...
Malicious code in chromedriver-gacrux-neutronstar-backend (npm)
The package chromedriver-gacrux-neutronstar-backend was found to contain malicious code...
Malicious code in gfk-bba-backend (npm)
The package gfk-bba-backend was found to contain malicious code...
Malicious code in multiverse-backend-paleobotany-cygnus (npm)
The package multiverse-backend-paleobotany-cygnus was found to contain malicious code...
MAL-2025-26888 Malicious code in multiverse-backend-paleobotany-cygnus (npm)
The package multiverse-backend-paleobotany-cygnus was found to contain malicious code...