Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p7g9-rp3g-mgfg
  • npm/@backstage/plugin-catalog-backend-module-unprocessed
  • npm/@backstage/plugin-catalog-unprocessed-entities
  • npm/@backstage/plugin-catalog-unprocessed-entities-common
Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks 06 May
  • Fix available
  • Severity - 4.3 (Medium)
MAL-2024-11768
  • npm/com.unity.entities
Malicious code in com.unity.entities (npm) 09 Dec 2024
  • No fix available
MAL-2022-3341
  • npm/geoadv-entities
Malicious code in geoadv-entities (npm) 20 Jun 2022
  • No fix available