https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 04:13:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4288 EUVD-2026-4288 https://cve.radiocsirt.org/vuln/euvd-2026-4288 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26150 <p>`@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. In `@backstage/backend-common` prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the `resolveSafeChildPath` utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. This issue is patched in `@backstage/backend-common` versions 0.21.1, 0.20.2, and 0.19.10.</p> <p>`@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. In `@backstage/backend-common` prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the `resolveSafeChildPath` utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. This issue is patched in `@backstage/backend-common` versions 0.21.1, 0.20.2, and 0.19.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-26150 https://cve.radiocsirt.org/vuln/ghsa-2fc9-xpp8-2g9h <p><strong>Affected:</strong> npm: @backstage/backend-common</p> <p>### Impact</p> <p>Paths checks with the `resolveSafeChildPath` utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers.</p> <p>### Patches Patched in `@backstage/backend-common` version `0.21.1`. Patched in `@backstage/backend-common` version `0.20.2`. Patched in `@backstage/backend-common` version `0.19.10`.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>- Open an issue in the [Backstage repository](https://github.com/backstage/backstage) - Visit our Discord, linked to in [Backstage README](https://github.com/backstage/backstage)</p> <p><strong>Affected:</strong> npm: @backstage/backend-common</p> <p>### Impact</p> <p>Paths checks with the `resolveSafeChildPath` utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers.</p> <p>### Patches Patched in `@backstage/backend-common` version `0.21.1`. Patched in `@backstage/backend-common` version `0.20.2`. Patched in `@backstage/backend-common` version `0.19.10`.</p> <p>### For more information If you have any questions or comments about this advisory:</p> <p>- Open an issue in the [Backstage repository](https://github.com/backstage/backstage) - Visit our Discord, linked to in [Backstage README](https://github.com/backstage/backstage)</p> https://cve.radiocsirt.org/vuln/ghsa-2fc9-xpp8-2g9h https://cve.radiocsirt.org/vuln/gsd-2024-26150 gsd-2024-26150 https://cve.radiocsirt.org/vuln/gsd-2024-26150