tocsin

CVE-2023-25571

3 advisories.

npm/@backstage/core-components CVE-2023-25571: medium 6.8

Cross site scripting Vulnerability in backstage Software Catalog

Action: Upgrade @backstage/core-components to 0.12.4 or later.

npm i @backstage/core-components@0.12.4

Affected

introducedfixedlast affected
00.12.4-

Fixed versions

0.12.4

Sources

CVE-2023-25571 · published · modified · JSON

npm/@backstage/catalog-model CVE-2023-25571: medium 6.8

Cross site scripting Vulnerability in backstage Software Catalog

Action: Upgrade @backstage/catalog-model to 1.2.0 or later.

npm i @backstage/catalog-model@1.2.0

Affected

introducedfixedlast affected
01.2.0-

Fixed versions

1.2.0

Sources

CVE-2023-25571 · published · modified · JSON

npm/@backstage/plugin-catalog-backend CVE-2023-25571: medium 6.8

Cross site scripting Vulnerability in backstage Software Catalog

Action: Upgrade @backstage/plugin-catalog-backend to 1.7.2 or later.

npm i @backstage/plugin-catalog-backend@1.7.2

Affected

introducedfixedlast affected
01.7.2-

Fixed versions

1.7.2

Sources

CVE-2023-25571 · published · modified · JSON