23 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient enforcement of root namespace restrictions in the catalog API. An attacker can modify plugin registrations, including removing existing registrations, creating invalid ones, or registering...
CVE-2026-112044
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
EUVD-2026-104053
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044
A security vulnerability exists in dotnet eShop (up to commit 913acea66708a59595351174cee9b29f37179d29). The flaw is located in the AddApplicationServices function within the file src/Catalog.API/Extensions/Extensions.cs of the Catalog API component. This vulnerability allows for improper authent...
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044 dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
CVE-2026-112044: Improper Authentication
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
PT-2026-117214
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper...
.NET Platform AdventureWorks Authorization Issue Vulnerability
The .NET Platform AdventureWorks has an authorization issue vulnerability. This vulnerability stems from an improper authentication mechanism in the AddApplicationServices function within the Catalog API component’s file src/Catalog.API/Extensions/Extensions.cs. This could allow remote attackers ...
Malicious code in data-catalog-api-schema (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.66) +46 more potentially affected by CVE-2025-12183 via org.lz4:lz4-pure-java (1.8.0)
org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...
EUVD-2024-2705
Malicious code in bioql PyPI...
MAL-2025-5388 Malicious code in data-catalog-api-schema (npm)
The package communicates with a domain associated with malicious activity...
Prototype Pollution
@backstage/plugin-catalog-backend is vulnerable to Prototype Pollution. The vulnerability is caused due to improper user input sanitization in the catalog API, which allows an attacker to interrupt the service using a specially crafted query...
CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend
Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...
CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend
Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...
CVE-2024-45815
Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the "1.26.0"...
CVE-2024-45815: Improperly Controlled Modification of Object Prototype Attributes
Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...
[SECURITY] [DSA 5414-1] docker-registry security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5414-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2023 https://www.debian.org/security/faq -...