{"action":"Upgrade @backstage/plugin-scaffolder-backend to 0.15.14 or later.","affected":[{"fixed":"0.15.14","introduced":"0"}],"component":"@backstage/plugin-scaffolder-backend","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.15.14"],"ghsa_id":"GHSA-2g8g-63j4-9w3r","id":"tcs_01M5KET0Y50FMTS0RRA9YWD3KY","modified_at":"2021-11-29T19:39:57Z","published_at":"2021-12-01T18:29:12Z","references":["https://osv.dev/vulnerability/GHSA-2g8g-63j4-9w3r","https://github.com/backstage/backstage/security/advisories/GHSA-2g8g-63j4-9w3r","https://github.com/backstage/backstage"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2g8g-63j4-9w3r","url":"https://osv.dev/vulnerability/GHSA-2g8g-63j4-9w3r"}],"summary":"RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend"}