4 Total advisories
4 Vulnerabilities
0 Malware
Vulnerabilities
MEDIUM 4.7
GHSA-38hq-7x33-php4
@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass
HIGH 7.4
CVE-2021-43776
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
UNKNOWN
CVE-2026-32236
@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch
MEDIUM 5.9
CVE-2026-32235
@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass
Ready to move
Start Securing
Free, no credit card | First findings in minutes