MEDIUM5.4npm
GHSA-qmc2-jpr5-7rg9· CVE-2024-53983Backstage Scaffolder plugin vulnerable to Server-Side Request Forgery
Modified: 12/2/2024
package
npm/@backstage/plugin-scaffolder-node
pkg:npm/%40backstage/plugin-scaffolder-node
HIGH7.1npm
GHSA-rq6q-wr2q-7pgp· CVE-2026-24046Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Modified: 2/3/2026