5399 matches found
CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
CVE-2025-55285
The CVE-2025-55285 issue affects the Backstage scaffolder-backend plugin. Before version 2.1.1, the fetch:template action could duplicate the input log path, causing some secrets passed via the {{ secrets }} bag to be written to logs instead of being redacted. Affected product: @backstage/plugin-...
CVE-2025-55285 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
Linux Distros Unpatched Vulnerability : CVE-2024-50624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is use...
PT-2025-33503 · Backstage · @Backstage/Plugin-Scaffolder-Backend
Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 2.1.1 Description: The backend for the default Backstage software templates exhibited duplicate logging of input values in the fetch:template action within the Scaffolder. This resulted i...
Linux Distros Unpatched Vulnerability : CVE-2020-1735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destinati...
Malicious code in kardashevscale-markdown-pdf-cressida-fetch (npm)
The package kardashevscale-markdown-pdf-cressida-fetch was found to contain malicious code...
Malicious code in fetch-zenobia-metabolomics-quantum-computing (npm)
The package fetch-zenobia-metabolomics-quantum-computing was found to contain malicious code...
Malicious code in logrocket-fetch (npm)
The package logrocket-fetch was found to contain malicious code...
Malicious code in buffer-nodejs-fomalhaut-fetch (npm)
The package buffer-nodejs-fomalhaut-fetch was found to contain malicious code...
Malicious code in fetch-cluster-carpo-await (npm)
The package fetch-cluster-carpo-await was found to contain malicious code...
Malicious code in buffer-fetch-lepton-nconf (npm)
The package buffer-fetch-lepton-nconf was found to contain malicious code...
Malicious code in joviology-fomalhaut-superagent-fetch (npm)
The package joviology-fomalhaut-superagent-fetch was found to contain malicious code...
Malicious code in universal-fetch-utils (npm)
The package universal-fetch-utils was found to contain malicious code...
Malicious code in terser-webpack-plugin-nebula-fetch-umbriel (npm)
The package terser-webpack-plugin-nebula-fetch-umbriel was found to contain malicious code...
Malicious code in soap-fetch-sociobiology-winston (npm)
The package soap-fetch-sociobiology-winston was found to contain malicious code...
MAL-2025-15971 Malicious code in bootes-fetch-eclipse-aether (npm)
The package bootes-fetch-eclipse-aether was found to contain malicious code...