CVE-2026-24047
1 advisory.
npm/@backstage/cli-common CVE-2026-24047: medium 6.3, EPSS 0.53%
@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass
Action: Upgrade @backstage/cli-common to 0.1.17 or later.
npm i @backstage/cli-common@0.1.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.17 | - |
Fixed versions
| 0.1.17 |
Sources
- osv: GHSA-2p49-45hj-7mc9
- https://github.com/backstage/backstage/security/advisories/GHSA-2p49-45hj-7mc9
- https://nvd.nist.gov/vuln/detail/CVE-2026-24047
- https://github.com/backstage/backstage/commit/ae4dd5d1572a4f639e1a466fd982656b50f8e692
- https://github.com/backstage/backstage
CVE-2026-24047 · published · modified · JSON