Lucene search
+L

9 matches found

OSV
OSV
•added 2026/10/07 4:24 p.m.•8 views

GHSA-95P4-VV4G-JXXM Backstage may expose sensitive information in Scaffolder task failure events

Impact Under specific template and failure conditions, an authenticated user may be able to retrieve sensitive values from Scaffolder task events. This can expose backend-managed credentials used during task execution. Patches Patched in @backstage/plugin-scaffolder-backend version 4.1.0...

5.3CVSS5.9AI score0.00284EPSS
SaveExploits0References5
Rows per page
Query Builder