@adelosrios/plugin-dependencytrack (>=0.2.8, <=0.2.9), @anshulgarg.cse/plugin-backstage-code-star-prerelease (0.0.2) +245 more potentially affected by CVE-2023-25571 via @backstage/core-components (>=0.0.0-nightly-20220310022859, <=0.11.2)

@backstage/core-components NPM version =0.0.0-nightly-20220310022859, =0.2.8, =0.0.1-alpha.18, =0.1.0, =0.0.0-nightly-2021101222132, =0.0.0-nightly-202010102951, =0.0.0-nightly-20220310022859, =0.1.1-alpha.7, =0.0.0-nightly-202010102951, =0.0.0-nightly-2021101022158, =0.0.0-nightly-20240929023448...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0) potentially affected by CVE-2023-25571 via @backstage/plugin-catalog-backend (1.5.1)

@backstage/plugin-catalog-backend NPM version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-catalog-backend and may be impacted: - @janus-idp/backstage-plugin-keycloak-backend 1.0.0 Source cves: CVE-2023-25571 Source advisory:...

CVE-2023-25571

CVE-2023-25571 affects Backstage components: @backstage/catalog-model &lt;1.2.0, @backstage/core-components &lt;0.12.4, and @backstage/plugin-catalog-backend

CVE-2023-25571 Backstage has XSS Vulnerability in Software Catalog

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...

CVE-2023-25571 Backstage has XSS Vulnerability in Software Catalog

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...