CVE-2023-6944
1 advisory.
npm/@backstage/backend-app-api CVE-2023-6944: high 7.3, EPSS 0.56%
@backstage/backend-app-api leaks GitLab access tokens
Action: Upgrade @backstage/backend-app-api to 0.5.9-next.1 or later.
npm i @backstage/backend-app-api@0.5.9-next.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.9-next.1 | - |
Fixed versions
| 0.5.9-next.1 |
Sources
- osv: GHSA-86rg-pf4c-5grg
- https://nvd.nist.gov/vuln/detail/CVE-2023-6944
- https://github.com/backstage/backstage/issues/21503
- https://github.com/backstage/backstage/pull/21582
- https://github.com/backstage/backstage/commit/0382db60f6c8e8715a702bde6408ad10a48d8e11
- https://access.redhat.com/errata/RHBA-2024:5869
- https://access.redhat.com/security/cve/CVE-2023-6944
- https://bugzilla.redhat.com/show_bug.cgi?id=2255204
- https://github.com/backstage/backstage
- https://github.com/backstage/backstage/blob/master/docs/releases/v1.21.0-next.2-changelog.md
- https://www.cve.org/CVERecord?id=CVE-2023-6944
CVE-2023-6944 · published · modified · JSON