CVE-2026-24047

CVE-2026-24047 affects Backstage: @backstage/cli-common relies on resolveSafeChildPath in @backstage/backend-plugin-api, which before v0.1.17 failed to validate symlink chains and dangling symlinks. This allowed path traversal via symlink chains (e.g., link1 → link2 → /outside) and dangling symli...

@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass

Impact The resolveSafeChildPath utility function in @backstage/backend-plugin-api, which is used to prevent path traversal attacks, failed to properly validate symlink chains and dangling symlinks. An attacker could bypass the path validation by: 1. Symlink chains: Creating link1 → link2 → /outsi...

EUVD-2026-4138

@backstage/cli-common has a possible resolveSafeChildPath Symlink Chain Bypass...

GHSA-2P49-45HJ-7MC9 @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass

Impact The resolveSafeChildPath utility function in @backstage/backend-plugin-api, which is used to prevent path traversal attacks, failed to properly validate symlink chains and dangling symlinks. An attacker could bypass the path validation by: 1. Symlink chains: Creating link1 → link2 → /outsi...

Backstage security vulnerabilities

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Backstage has a security vulnerability that stems from the resolveSafeChildPath utility function not properly verifying symbolic link chains and floating symbolic links,...

GHSA-2FC9-XPP8-2G9H `@backstage/backend-common` vulnerable to path traversal through symlinks

Impact Paths checks with the resolveSafeChildPath utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. Patches Patched in @backstage/backend-common version 0.21.1. Patched in @backstage/backend-common version 0.20.2. Patch...

PT-2024-21301 · Npm · @Backstage/Backend-Common

Name of the Vulnerable Software and Affected Versions: @backstage/backend-common versions prior to 0.21.1 @backstage/backend-common versions prior to 0.20.2 @backstage/backend-common versions prior to 0.19.10 Description: The issue concerns the @backstage/backend-common library, where paths check...