Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
•added 2026/10/07 4:24 p.m.•22 views

Backstage may expose sensitive information in Scaffolder task failure events

Impact Under specific template and failure conditions, an authenticated user may be able to retrieve sensitive values from Scaffolder task events. This can expose backend-managed credentials used during task execution. Patches Patched in @backstage/plugin-scaffolder-backend version 4.1.0...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2026/10/06 9:34 p.m.•14 views

CVE-2026-106502 Backstage: Sensitive information may be exposed in Scaffolder task failure events

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

5.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/06 9:34 p.m.•28 views

CVE-2026-106502

The Backstage framework, specifically the @backstage/plugin-scaffolder-backend package in versions prior to 4.1.0 , contains a vulnerability where sensitive information may be exposed in Scaffolder task failure events . Under specific template and failure conditions, an authenticated user could r...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 9:34 p.m.•11 views

CVE-2026-106502 Backstage: Sensitive information may be exposed in Scaffolder task failure events

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 9:34 p.m.•62 views

CVE-2026-106502 Backstage: Sensitive information may be exposed in Scaffolder task failure events

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

5.3CVSS0.0029EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2019-0005

Malware in sbrugna...

7.3CVSS6.5AI score0.00424EPSS
SaveExploits0References18
Citrix
Citrix
•added 2025/05/06 12:00 a.m.•32 views

WEM External task not working when "run script " selected

External task configured using below option for "run script" In the WEM logs we could see below error 12:14:13 PM Warning - VuemExternalTaskExecutor.ExecuteExternalTask : External Task - Create User Cache Folder Id:3 - Unable to validate target file existence... 12:14:13 PM Exception -...

7.1AI score
SaveExploits0
Veeam
Veeam
•added 2024/08/09 12:00 a.m.•47 views

Hyper-V SureBackup Task Failure: "VM was created with the later version of Hyper-V than the one installed on host"

Challenge A task within a SureBackup job for a Hyper-V environment fails with the error: Error: VM was created with the later version of Hyper-V than the one installed on host Cause This error occurs when the Virtual Lab in use by the SureBackup job is located on a host that is running a version ...

7AI score
SaveExploits0Affected Software1
Veeam
Veeam
•added 2023/02/22 12:00 a.m.•44 views

Task fails with "Repository is not compatible with Catalyst Store with fixed block setting enabled"

Challenge A Veeam Backup & Replication job targeting a StoreOnce Repository backed by a Catalyst Store that has Fixed Block Chunking enabled fails with either of the following errors: Repository is not compatible with Catalyst Store with fixed block setting enabled Error:...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
•added 2019/10/15 5:28 a.m.•34 views

Information Disclosure

ansible is vulnerable to information disclosure. The attack exists when an incorrect parameter name is passed to a module having an argumentspec with sub parameters marked as nolog, causing a failure of the task. It exposes data in sub parameter fields as it leaves the data unmasked if it is run...

5.5CVSS3.7AI score0.00424EPSS
SaveExploits0References9Affected Software1
NVD
NVD
•added 2019/10/14 3:15 p.m.•45 views

CVE-2019-14858

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argumentspec with sub parameters marked as nolog, passing an invalid parameter name to the module will cause the task to fail before the nolog options in the sub parameters are processe...

7.3CVSS5.9AI score0.00424EPSS
SaveExploits0References8
Citrix
Citrix
•added 2018/10/10 12:00 a.m.•16 views

Adding layer versions with Nutanix fails with error: Failed to execute the script.

When trying to add versions to layers, the task may fail with an error. Failed to execute the script. Unable to perform the operation. The Nutanix server has encountered a failure processing the request 500. Error: internal server error. Details: Error occurred while creating Disk image...

7.3AI score
SaveExploits0
Rows per page
Query Builder