Incorrect Authorization

Overview @backstage/plugin-scaffolder-backend-module-bitbucket-server is a The Bitbucket Server module for @backstage/plugin-scaffolder-backend Affected versions of this package are vulnerable to Incorrect Authorization via SCM scaffolder actions in bitbucketServer.ts and related action files,...

Incorrect Authorization

Overview @backstage/plugin-scaffolder-backend-module-github is a The github module for @backstage/plugin-scaffolder-backend Affected versions of this package are vulnerable to Incorrect Authorization via SCM scaffolder actions in bitbucketServer.ts and related action files, where the actions fall...

Incorrect Authorization

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Incorrect Authorization via SCM scaffolder actions in bitbucketServer.ts and related action files, where the actions fall back to...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via SCM scaffolder actions in bitbucketServer.ts and related action files, where the actions fall back to server-side integration credentials when no user-supplied token is provided. An authenticated attacker can...

Incorrect Authorization

Overview @backstage/plugin-catalog-backend-module-gitlab is an A Backstage catalog backend module that helps integrate towards GitLab Affected versions of this package are vulnerable to Incorrect Authorization via the GitlabOrgDiscoveryEntityProvider when handling usercreate webhook events, where...

Symlink Attack

Overview @backstage/plugin-scaffolder-backend-module-bitbucket-server is a The Bitbucket Server module for @backstage/plugin-scaffolder-backend Affected versions of this package are vulnerable to Symlink Attack via the pull request workspace copy logic in bitbucketServerPullRequest.ts and the...

Symlink Attack

Overview @backstage/plugin-scaffolder-backend-module-bitbucket-cloud is a The Bitbucket Cloud module for @backstage/plugin-scaffolder-backend Affected versions of this package are vulnerable to Symlink Attack via the pull request workspace copy logic in bitbucketServerPullRequest.ts and the...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview @backstage/plugin-kubernetes-backend is an A Backstage backend plugin that integrates towards Kubernetes Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via CatalogClusterLocator in...

Improper Verification of Cryptographic Signature

Overview @backstage/plugin-auth-backend-module-oidc-provider is a The oidc-provider backend module for the auth plugin. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the oidcAuthenticator within authenticator.ts, where the email claim from...

Missing Authorization

Overview @backstage/plugin-techdocs-backend is a The Backstage backend plugin that renders technical documentation for your components Affected versions of this package are vulnerable to Missing Authorization via the /static/docs/:namespace/:kind/:name route handler in router.ts, where an attacke...

Relative Path Traversal

Overview @backstage/plugin-techdocs-backend is a The Backstage backend plugin that renders technical documentation for your components Affected versions of this package are vulnerable to Relative Path Traversal via the /static/docs/:namespace/:kind/:name route handler in router.ts, where the...

Directory Traversal

Overview @backstage/plugin-catalog-backend-module-azure is an A Backstage catalog backend module that helps integrate towards Azure Affected versions of this package are vulnerable to Directory Traversal via the parseUrl functions in AwsS3UrlReader.ts and AzureBlobStorageUrlReader.ts, where URL...

Directory Traversal

Overview @backstage/plugin-catalog-backend-module-aws is an A Backstage catalog backend module that helps integrate towards AWS Affected versions of this package are vulnerable to Directory Traversal via the parseUrl functions in AwsS3UrlReader.ts and AzureBlobStorageUrlReader.ts, where URL path...

Directory Traversal

Overview @backstage/backend-defaults is a Backend defaults used by Backstage backend apps Affected versions of this package are vulnerable to Directory Traversal via the parseUrl functions in AwsS3UrlReader.ts and AzureBlobStorageUrlReader.ts, where URL path segments are not validated for...

Directory Traversal

Overview @backstage/plugin-proxy-backend is an A Backstage backend plugin that helps you set up proxy endpoints in the backend Affected versions of this package are vulnerable to Directory Traversal via the proxy request path handling in router.ts when an attacker sends a request containing .. pa...

Incorrect Authorization

Overview @backstage/backend-defaults is a Backend defaults used by Backstage backend apps Affected versions of this package are vulnerable to Incorrect Authorization via the service credential delegation path in DefaultAuthService, when a token issued to an external service principal carries acce...

External Control of File Name or Path

Overview @backstage/backend-defaults is a Backend defaults used by Backstage backend apps Affected versions of this package are vulnerable to External Control of File Name or Path via the cloud storage URL reader implementations AwsS3UrlReader, AwsCodeCommitUrlReader, AzureBlobStorageUrlReader, a...

Incorrect Authorization

Overview @backstage/plugin-catalog-backend is a The Backstage backend plugin that provides the Backstage catalog Affected versions of this package are vulnerable to Incorrect Authorization in DefaultCatalogProcessingOrchestrator during catalog processing, where the type field of a registered...

Server-side Request Forgery (SSRF)

Overview @backstage/plugin-catalog-backend is a The Backstage backend plugin that provides the Backstage catalog Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the relativeUrl function in PlaceholderProcessor.ts, where a catalog entity placeholder value...

Insertion of Sensitive Information Into Sent Data

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the task serialization logic in router.ts, which previously included secrets a...

Insertion of Sensitive Information into Log File

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the NunjucksWorkflowRunner in NunjucksWorkflowRunner.ts, where secret values...

Improper Handling of Case Sensitivity

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via isActionAuthorized in NunjucksWorkflowRunner.ts, where numeric or numeric-string values...

Race Condition

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Race Condition via the retryTask method in DatabaseTaskStore.ts, where a task retry operation is performed without first validating...

Incorrect Authorization

Overview @backstage/plugin-scaffolder-backend is a The Backstage backend plugin that helps you create new things Affected versions of this package are vulnerable to Incorrect Authorization via the getAuthorizeConditions function in checkPermissions.ts, which fails to enforce DENY authorization...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop through the profile parser when processing a specially crafted XMP profile. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting a malicious image file. Remediation A f...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the delegate process when symlink cleanup does not properly check the MAGICKSHREDPASSES environment variable. An attacker can overwrite arbitrary files with random data by leveraging a local...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the MVG decoder process. An attacker can cause excessive resource consumption by submitting a specially crafted MVG image. Details Denial of Service DoS describes a family of attacks, all aimed at making a...

Denial of Service (DoS)

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Denial of Service (DoS)

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Denial of Service (DoS)

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

Denial of Service (DoS)

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Denial of Service (DoS)

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Denial of Service (DoS)

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Denial of Service (DoS)

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the GetVirtualPixels function. An attacker can cause a crash of the server process by supplying crafted input that triggers an integer calculation error, resulting in a heap buffer write beyond...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Integer Overflow or Wraparound

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...