Threats Tagged 'ghsa-xvh9-35w9-42m4'
View all threats tagged with 'ghsa-xvh9-35w9-42m4'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-xvh9-35w9-42m4'
Click on any threat for detailed analysis and mitigation recommendations
0 A path traversal vulnerability exists in the Backstage plugin catalog backend modules for Azure Blob Storage and AWS S3. Insufficient validation of storage object paths allows catalog descriptors to be read from outside the intended storage boundaries, limited to locations accessible by the backend's configured credentials. This issue affects versions prior to 0.3.21 for the Azure module, 0.4.27 for the AWS module, and 0.7.18 for the backend defaults. The vulnerability has a low severity with a CVSS score of 3.0. Patches are available, and recommended mitigations include restricting blob/object creation or renaming to trusted principals, scoping credentials and network access, or disabling affected catalog providers if restrictions cannot be enforced. Join the discussion | GCVE Database | 10/07/2026, 17:59:55 UTC Added: 10/07/2026, 21:56:17 UTC |
Showing 1 to 1 of 1 result