Hoch 8.1Software
CVE-2026-106457
Backstage is an open framework for building developer portals.
Backstage\/Plugin-Auth-Backend-Module-Cloudflare-Access-Provider
Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by insufficient audience validation in the cloudflare access auth provider. The Cloudflare Access auth provider verifies a token's signature and team issuer, but affected versions do not verify that the token was issued for the Backstage application. A user holding a valid token for another Access…
6. Okt 2026
Original bei NVD öffnen