Package impact
npm / @backstage/backend-defaults
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-24048 | unknown | — | — | 4mo ago | Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow` | |||
| CVE-2026-24046 | unknown | — | — | 4mo ago | Backstage has a Possible Symlink Path Traversal in Scaffolder Actions |