Lucene search
+L

1 matches found

Snyk
Snyk
added 2026/01/21 10:40 p.m.6 views

UNIX Symbolic Link (Symlink) Following

Overview @backstage/backend-plugin-api is a Core API used by Backstage backend plugins Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the resolveSafeChildPath function, which relies on resolveRealPath. An attacker can access sensitive files outside the...

7CVSS5.7AI score0.00487EPSS
SaveExploits0References3
Rows per page
Query Builder