@backstage/plugin-auth-backend vulnerabilities (npm)
4 vulnerabilities.
-
@backstage/plugin-auth-backendnpm Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend` 4.7 Medium -
@backstage/plugin-auth-backendnpm @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch 1.7 Low -
@backstage/plugin-auth-backendnpm @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass 5.9 Medium -
@backstage/plugin-auth-backendnpm XSS vulnerability in @backstage/plugin-auth-backend 7.4 High