[QuentinBisson]

Rationale

On the Bot PRs page, Classify now and Approve and merge on a large queue (honeybadger, 290 PRs) outlast the muster server's timeout for marge (120 s on gazelle) and fail, although marge is still working.

Changes

• gs-node: MusterMcpClient.callToolWithProgress runs a tool call on the official MCP SDK (@modelcontextprotocol/sdk 1.32.1, deduped with the copy @backstage/plugin-mcp-actions-backend uses), sends a progressToken and restarts its wait on every notifications/progress. @ai-sdk/mcp supports neither, so only calls that stream progress move to the SDK for now.
• muster-backend: POST /call/progress streams the progress as NDJSON, then one result or error line; a caller that disconnects cancels the call.
• muster: MusterApi.callToolWithProgress, and MusterAnswerCutError for an answer that ends before its result.
• bot-prs: every sweep goes through it; the classify banner and the Sweep / Approve and merge dialogs show each team's progress. A cut answer is reported as one that never arrived.

Effect on end users

Bot PRs: Classify now, Approve and merge and Sweep show how far marge has got for each team, and no longer fail on large queues while marge is still working.

Background and context

giantswarm/roadmap#4394. Needs giantswarm/muster#1487 (progress restarts the per-server timeout) and giantswarm/marge#242 (marge reports progress) deployed; without them the page behaves as today.

Ask to reviewers

Two MCP client stacks in gs-node for now; moving the rest of MusterMcpClient to the official SDK is a follow-up.

[github-actions]

JS Dependency Audit

0 added · 4 removed · 239 total (-4 vs base)

Projects audited

• . (manager: yarn-berry)
• ./packages/app (manager: unknown) — skipped on PR head: no recognized lockfile
• ./packages/backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./packages/backend-common (manager: unknown) — skipped on PR head: no recognized lockfile
• ./packages/backend-headless-service (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/agent-platform (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/agent-platform-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/agent-platform-common (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/ai-chat (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/ai-chat-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/ai-chat-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/analytics-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/auth-backend-module-gs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/bot-prs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/catalog-backend-module-gs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/error-reporter-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/flux (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/flux-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/gs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/gs-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/gs-common (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/gs-node (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/gs-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/kubernetes-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/muster (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/muster-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/plans (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/plans-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/platform-capabilities (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/platform-capabilities-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/repositories (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/repositories-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/roadmap (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/roadmap-backend (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/scaffolder-backend-module-gs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/techdocs-backend-module-gs (manager: unknown) — skipped on PR head: no recognized lockfile
• ./plugins/ui-react (manager: unknown) — skipped on PR head: no recognized lockfile
• ./scripts/eslint-plugin-giantswarm (manager: unknown) — skipped on PR head: no recognized lockfile

Removed by this PR (4)

• 🟠 high @hono/node-server (<1.19.10) — @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware advisory
• 🟠 high @modelcontextprotocol/sdk (>=1.12.0 <1.31.0) — MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server advisory
• 🟡 moderate @hono/node-server (<1.19.13) — @hono/node-server: Middleware bypass via repeated slashes in serveStatic advisory
• 🟡 moderate @hono/node-server (<1.19.15) — Node.js Adapter for Hono: Path traversal in serve-static on Windows via encoded backslash (%5C) advisory

Full current vulnerability list (239)

• 🔴 critical cipher-base (<=1.0.4) — cipher-base is missing type checks, leading to hash rewind and passing on crafted data advisory
• 🔴 critical elliptic (<=6.6.0) — Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) advisory
• 🔴 critical handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has JavaScript Injection via AST Type Confusion advisory
• 🔴 critical handlebars (>=4.0.0 <=4.7.9) — Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937) advisory
• 🔴 critical handlebars (>=3.0.0 <=4.7.9) — Handlebars: JavaScript Injection via Own Property Check Bypass advisory
• 🔴 critical jsonata (>=2.0.0 <2.2.1) — JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions advisory
• 🔴 critical jsonata (>=2.0.0 <2.2.0) — JSONata: Arbitrary Code Execution via crafted JSONata expressions advisory
• 🔴 critical jsonata (>=2.0.0 <2.2.1) — JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions advisory
• 🔴 critical pbkdf2 (>=3.0.10 <=3.1.2) — pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos advisory
• 🔴 critical pbkdf2 (>=1.0.0 <=3.1.2) — pbkdf2 silently disregards Uint8Array input, returning static keys advisory
• 🔴 critical proxy-addr (>=1.1.0 <2.0.8) — proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet advisory
• 🔴 critical shell-quote (>=1.8.4 <1.11.0) — shell-quote: quote() command injection via a line terminator in a token after a { comment } token advisory
• 🟠 high @backstage/backend-defaults (<0.17.8) — Backstage: Improper preservation of access restrictions during service credential delegation advisory
• 🟠 high @backstage/plugin-scaffolder-node (>=0.12.0 <0.12.3) — Backstage has a Possible Symlink Path Traversal in Scaffolder Actions advisory
• 🟠 high @graphql-tools/utils (<=12.0.0) — GraphQL Tools has prototype pollution in well-established utility function mergeDeep advisory
• 🟠 high @grpc/grpc-js (>=1.14.0 <1.14.4) — @grpc/grpc-js: A malformed request can cause a server crash advisory
• 🟠 high @grpc/grpc-js (>=1.14.0 <1.14.4) — @grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash advisory
• 🟠 high @grpc/grpc-js (>=1.14.0 <1.14.5) — @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized advisory
• 🟠 high adm-zip (<0.6.0) — adm-zip: Crafted ZIP file triggers 4GB memory allocation advisory
• 🟠 high adm-zip (<0.6.1) — adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) advisory
• 🟠 high adm-zip (<=0.6.0) — adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0 advisory
• 🟠 high adm-zip (<=0.6.0) — adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation advisory
• 🟠 high adm-zip (<=0.6.0) — adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS) advisory
• 🟠 high brace-expansion (<1.1.20) — brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion advisory
• 🟠 high brace-expansion (>=2.0.0 <2.1.6) — brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion advisory
• 🟠 high brace-expansion (>=4.0.0 <5.0.11) — brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion advisory
• 🟠 high brace-expansion (<1.1.19) — brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion advisory
• 🟠 high brace-expansion (>=2.0.0 <2.1.5) — brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion advisory
• 🟠 high brace-expansion (>=4.0.0 <5.0.10) — brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion advisory
• 🟠 high braces (<=3.0.3) — braces vulnerable to stack-exhaustion denial of service through deeply nested patterns advisory
• 🟠 high browserslist (<=4.28.6) — Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM advisory
• 🟠 high browserslist (<=4.28.6) — Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) advisory
• 🟠 high compression (<1.8.2) — compression vulnerable to Denial of Service via memory leak on premature response close advisory
• 🟠 high fast-uri (>=3.0.0 <=3.1.3) — fast-uri vulnerable to host confusion via literal backslash authority delimiter advisory
• 🟠 high fast-uri (>=3.0.0 <3.1.5) — fast-uri vulnerable to host confusion via backslash authority introducer advisory
• 🟠 high fast-uri (>=3.0.0 <=3.1.0) — fast-uri vulnerable to path traversal via percent-encoded dot segments advisory
• 🟠 high fast-uri (>=3.0.0 <=3.1.1) — fast-uri vulnerable to host confusion via percent-encoded authority delimiters advisory
• 🟠 high fast-uri (>=3.0.0 <3.1.6) — fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization advisory
• 🟠 high fast-uri (>=3.0.0 <3.1.6) — fast-uri vulnerable to host confusion via percent-encoded scheme normalization advisory
• 🟠 high fast-uri (>=3.0.0 <3.1.3) — fast-uri vulnerable to host confusion via failed IDN canonicalization advisory
• 🟠 high fast-uri (>=3.0.0 <3.1.7) — fast-uri vulnerable to authority injection via an unvalidated port in serialize advisory
• 🟠 high handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block advisory
• 🟠 high handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial advisory
• 🟠 high handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation advisory
• 🟠 high handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options advisory
• 🟠 high hono (<4.12.25) — hono: CORS Middleware reflects any Origin with credentials when origin defaults to the wildcard advisory
• 🟠 high http-cache-semantics (<=4.2.0) — http-cache-semantics max-stale handling can disclose cross-user cached responses advisory
• 🟠 high immutable (<3.8.3) — Immutable is vulnerable to Prototype Pollution advisory
• 🟠 high immutable (<3.8.4) — Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set advisory
• 🟠 high immutable (<3.8.4) — Immutable.js List 32-bit trie overflow → unrecoverable DoS advisory
• 🟠 high ip-address (<=10.3.0) — ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass advisory
• 🟠 high js-yaml (>=4.0.0 <4.3.0) — js-yaml: YAML merge-key chains can force quadratic CPU consumption advisory
• 🟠 high js-yaml (>=4.0.0 <4.3.1) — JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported advisory
• 🟠 high js-yaml (>=4.0.0 <4.3.2) — js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources advisory
• 🟠 high jsonata (>=2.0.0 <2.2.0) — jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion advisory
• 🟠 high jws (=4.0.0) — auth0/node-jws Improperly Verifies HMAC Signature advisory
• 🟠 high jws (<3.2.3) — auth0/node-jws Improperly Verifies HMAC Signature advisory
• 🟠 high linkify-it (<=5.0.0) — LinkifyIt#match scan loop has quadratic algorithmic complexity advisory
• 🟠 high linkify-it (<=5.0.1) — linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text advisory
• 🟠 high lodash (>=4.0.0 <=4.17.23) — lodash vulnerable to Code Injection via _.template imports key names advisory
• 🟠 high lodash-es (>=4.0.0 <=4.17.23) — lodash vulnerable to Code Injection via _.template imports key names advisory
• 🟠 high mysql2 (<3.22.0) — MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials advisory
• 🟠 high nanoid (<3.3.18) — nanoid: custom generators can loop indefinitely when size is zero advisory
• 🟠 high node-forge (<=1.4.0) — node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements advisory
• 🟠 high picomatch (<2.3.2) — Picomatch has a ReDoS vulnerability via extglob quantifiers advisory
• 🟠 high source-map-js (>=1.0.0 <1.2.2) — source-map-js allows event-loop denial of service through indexed source-map section offsets advisory
• 🟠 high svgo (>=1.0.0 <2.8.3) — SVGO removeScripts plugin leaves some executable scripts intact advisory
• 🟠 high svgo (>=1.0.0 <2.8.4) — SVGO: removeScripts allows executable links through namespace and control-character bypasses advisory
• 🟠 high tmp (<0.2.6) — tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape advisory
• 🟠 high undici (>=7.0.0 <7.29.1) — undici vulnerable to Denial of Service via unrequested WebSocket subprotocol advisory
• 🟠 high undici (>=6.7.0 <6.28.1) — undici vulnerable to Denial of Service via unrequested WebSocket subprotocol advisory
• 🟠 high undici (>=7.24.1 <7.29.1) — undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool advisory
• 🟠 high webpack-dev-middleware (<7.4.5) — webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath advisory
• 🟡 moderate @backstage/backend-defaults (<0.17.8) — Backstage: Improper input validation in cloud storage URL readers advisory
• 🟡 moderate @backstage/plugin-circleci (0.3.35) — This package has been moved to the to the https://github.com/CircleCI-Public/backstage-plugin repository. You should migrate to using that instead.
• 🟡 moderate @fortawesome/react-fontawesome (0.2.6) — v0.2.x is no longer supported. Unless you are still using FontAwesome 5, please update to v3.1.1 or greater.
• 🟡 moderate @humanwhocodes/config-array (0.13.0) — Use @eslint/config-array instead
• 🟡 moderate @humanwhocodes/object-schema (2.0.3) — Use @eslint/object-schema instead
• 🟡 moderate @material-ui/core (4.12.4) — Material UI v4 doesn't receive active development since September 2021. See the guide https://mui.com/material-ui/migration/migration-v4/ to upgrade to v5.
• 🟡 moderate @material-ui/lab (4.0.0-alpha.61) — Material UI v4 doesn't receive active development since September 2021. See the guide https://mui.com/material-ui/migration/migration-v4/ to upgrade to v5.
• 🟡 moderate @material-ui/pickers (3.3.11) — This package no longer supported. It has been relaced by @mui/x-date-pickers
• 🟡 moderate @material-ui/styles (4.11.5) — Material UI v4 doesn't receive active development since September 2021. See the guide https://mui.com/material-ui/migration/migration-v4/ to upgrade to v5.
• 🟡 moderate @octokit/plugin-paginate-rest (>=1.0.0 <9.2.2) — @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking advisory
• 🟡 moderate @octokit/plugin-paginate-rest (>=9.3.0-beta.1 <11.4.1) — @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking advisory
• 🟡 moderate @octokit/request (>=1.0.0 <8.4.1) — @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking advisory
• 🟡 moderate @octokit/request-error (>=1.0.0 <5.1.1) — @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking advisory
• 🟡 moderate @octokit/webhooks-types (6.11.0) — Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
• 🟡 moderate @react-hookz/deep-equal (1.0.4) — PACKAGE IS DEPRECATED AND WILL BE DETED SOON, USE @ver0/deep-equal INSTEAD
• 🟡 moderate @rjsf/material-ui (5.24.13) — Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
• 🟡 moderate @sentry/browser (<7.119.1) — Sentry SDK Prototype Pollution gadget in JavaScript SDKs advisory
• 🟡 moderate @types/http-proxy-middleware (1.0.0) — This is a stub types definition. http-proxy-middleware provides its own type definitions, so you do not need this installed.
• 🟡 moderate @types/keyv (4.2.0) — This is a stub types definition. keyv provides its own type definitions, so you do not need this installed.
• 🟡 moderate @ungap/structured-clone (1.3.0) — Potential CWE-502 - Update to 1.3.1 or higher
• 🟡 moderate adm-zip (>=0.5.9 <=0.6.0) — adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite advisory
• 🟡 moderate adm-zip (<=0.6.0) — adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content advisory
• 🟡 moderate adm-zip (<=0.6.0) — adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path advisory
• 🟡 moderate atlassian-openapi (1.0.19) — DEPRECATED: atlassian-openapi has moved to @atlassian/atlassian-openapi. The latest version is 1.0.6. Please update your dependency.
• 🟡 moderate baseline-browser-mapping (>=2.0.0 <2.11.0) — baseline-browser-mapping process termination on invalid input causes denial of service advisory
• 🟡 moderate bn.js (>=5.0.0 <5.2.3) — bn.js affected by an infinite loop advisory
• 🟡 moderate bn.js (<4.12.3) — bn.js affected by an infinite loop advisory
• 🟡 moderate boolean (3.2.0) — Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
• 🟡 moderate brace-expansion (<1.1.21) — brace-expansion: Quadratic-time expansion of the {a},b} rewrite causes CPU denial of service advisory
• 🟡 moderate brace-expansion (>=2.0.0 <2.1.7) — brace-expansion: Quadratic-time expansion of the {a},b} rewrite causes CPU denial of service advisory
• 🟡 moderate brace-expansion (>=4.0.0 <5.0.12) — brace-expansion: Quadratic-time expansion of the {a},b} rewrite causes CPU denial of service advisory
• 🟡 moderate core-js (2.6.12) — core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js.
• 🟡 moderate crypto-js (4.2.0) — Active development of CryptoJS has been discontinued. This library is no longer maintained.
• 🟡 moderate dompurify (>=3.1.3 <3.2.7) — DOMPurify contains a Cross-site Scripting vulnerability advisory
• 🟡 moderate dompurify (>=3.1.3 <=3.3.1) — DOMPurify contains a Cross-site Scripting vulnerability advisory
• 🟡 moderate dompurify (<3.4.0) — DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix) advisory
• 🟡 moderate dompurify (>=1.0.10 <3.4.0) — DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode advisory
• 🟡 moderate dompurify (>=3.0.1 <3.4.0) — DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback advisory
• 🟡 moderate dompurify (<=3.4.5) — DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound instanceof checks advisory
• 🟡 moderate dompurify (<=3.4.5) — DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM advisory
• 🟡 moderate dompurify (<=3.4.6) — DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside .content advisory
• 🟡 moderate dompurify (<=3.4.10) — DOMPurify: Permanent ALLOWED_ATTR pollution via setConfig() bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch) advisory
• 🟡 moderate dompurify (<3.4.7) — DOMPurify: Hook mutation of data.allowedTags / data.allowedAttributes permanently pollutes DEFAULT_ALLOWED_TAGS / DEFAULT_ALLOWED_ATTR advisory
• 🟡 moderate dompurify (<=3.3.3) — DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation advisory
• 🟡 moderate dompurify (<=3.3.1) — DOMPurify ADD_ATTR predicate skips URI validation advisory
• 🟡 moderate dompurify (<=3.3.1) — DOMPurify USE_PROFILES prototype pollution allows event handlers advisory
• 🟡 moderate dompurify (<3.3.2) — DOMPurify is vulnerable to mutation-XSS via Re-Contextualization advisory
• 🟡 moderate dompurify (<=3.4.12) — DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS advisory
• 🟡 moderate eslint (8.57.1) — This version is no longer supported. Please see https://eslint.org/version-support for other options.
• 🟡 moderate fast-copy (>=3.0.0 <3.1.0) — fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values advisory
• 🟡 moderate fast-copy (>=4.0.0 <4.1.0) — fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values advisory
• 🟡 moderate fast-uri (>=3.0.0 <3.1.8) — fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets advisory
• 🟡 moderate fast-xml-parser (<5.7.0) — fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters advisory
• 🟡 moderate file-type (>=13.0.0 <21.3.1) — file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header advisory
• 🟡 moderate glob (7.2.3) — Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
• 🟡 moderate handlebars (>=4.0.0 <4.7.9) — Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection advisory
• 🟡 moderate handlebars (>=4.6.0 <=4.7.8) — Handlebars.js has a Prototype Method Access Control Gap via Missing lookupSetter Blocklist Entry advisory
• 🟡 moderate handlebars (>=4.0.0 <=4.7.9) — Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates advisory
• 🟡 moderate hono (<4.12.12) — Hono: Non-breaking space prefix bypass in cookie name handling in getCookie() advisory
• 🟡 moderate hono (>=4.0.0 <=4.12.11) — Hono: Path traversal in toSSG() allows writing files outside the output directory advisory
• 🟡 moderate hono (<4.12.12) — Hono: Middleware bypass via repeated slashes in serveStatic advisory
• 🟡 moderate hono (<4.12.12) — Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses advisory
• 🟡 moderate hono (<4.12.18) — Hono has CSS Declaration Injection via Style Object Values in JSX SSR advisory
• 🟡 moderate hono (<4.12.18) — Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage advisory
• 🟡 moderate hono (<4.12.16) — Hono: bodyLimit() can be bypassed for chunked / unknown-length requests advisory
• 🟡 moderate hono (<4.12.16) — hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection advisory
• 🟡 moderate hono (<4.12.21) — Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 advisory
• 🟡 moderate hono (<4.12.21) — Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection advisory
• 🟡 moderate hono (<4.12.21) — Hono: JWT middleware accepts any Authorization scheme, not only Bearer advisory
• 🟡 moderate hono (<4.12.21) — Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths advisory
• 🟡 moderate hono (<4.12.14) — hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR advisory
• 🟡 moderate hono (<4.12.25) — hono: Body Limit Middleware can be bypassed on AWS Lambda by understating Content-Length advisory
• 🟡 moderate hono (<4.12.25) — hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest advisory
• 🟡 moderate hono (<4.12.25) — hono: Path traversal in serve-static on Windows via encoded backslash (%5C) advisory
• 🟡 moderate hono (<4.12.25) — hono: AWS Lambda adapter merges multiple Set-Cookie headers into one value, dropping cookies on ALB single-header and Lattice advisory
• 🟡 moderate hono (>=4.3.3 <4.12.27) — Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication advisory
• 🟡 moderate hono (>=4.11.8 <4.12.27) — hono/jsx does not isolate context per request, leading to cross-request data disclosure advisory
• 🟡 moderate hono (>=4.0.0 <4.12.27) — Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility advisory
• 🟡 moderate hono (<4.12.34) — Hono: ReDoS in CORS middleware via Access-Control-Request-Headers advisory
• 🟡 moderate hono (>=3.8.0 <4.12.34) — Hono: memo() retains SSR output across requests, leading to cross-user data disclosure advisory
• 🟡 moderate hono (>=4.12.0 <4.12.34) — Hono: Algorithmic Complexity DoS in Language Middleware advisory
• 🟡 moderate hono (<4.13.5) — Hono: Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory advisory
• 🟡 moderate hono (<4.13.5) — Hono: Unbounded dot-notation nesting in parseBody() can cause memory exhaustion advisory
• 🟡 moderate hono (<4.13.5) — Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials advisory
• 🟡 moderate hono (<4.12.12) — Hono missing validation of cookie name on write path in setCookie() advisory
• 🟡 moderate hono (<4.13.7) — hono/jsx renders plain strings unescaped in boundary components, leading to XSS advisory
• 🟡 moderate http-proxy-middleware (>=3.0.0 <3.0.5) — http-proxy-middleware allows fixRequestBody to proceed even if bodyParser has failed advisory
• 🟡 moderate http-proxy-middleware (>=3.0.0 <3.0.4) — http-proxy-middleware can call writeBody twice because "else if" is not used advisory
• 🟡 moderate http-proxy-middleware (>=0.16.0 <2.0.10) — http-proxy-middleware router host+path substring matching allows Host-header-driven backend routing bypass advisory
• 🟡 moderate http-proxy-middleware (>=3.0.0 <3.0.6) — http-proxy-middleware router host+path substring matching allows Host-header-driven backend routing bypass advisory
• 🟡 moderate inflight (1.0.6) — This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
• 🟡 moderate ip-address (<=10.1.0) — ip-address has XSS in Address6 HTML-emitting methods advisory
• 🟡 moderate ip-address (<=10.5.0) — ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts advisory
• 🟡 moderate ip-address (<=10.7.0) — ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range advisory
• 🟡 moderate ip-address (<=10.7.0) — ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process advisory
• 🟡 moderate js-yaml (>=4.0.0 <=4.1.1) — JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases advisory
• 🟡 moderate jsonata (>=2.0.0 <2.2.1) — jsonata: Function Binding Prototype Pollution via hasOwnProperty Override advisory
• 🟡 moderate launch-editor (<=2.14.0) — launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows advisory
• 🟡 moderate lodash (<=4.17.23) — lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit advisory
• 🟡 moderate lodash-es (<=4.17.23) — lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit advisory
• 🟡 moderate lodash-es (>=4.0.0 <=4.17.22) — Lodash has Prototype Pollution Vulnerability in _.unset and _.omit functions advisory
• 🟡 moderate lodash.get (4.4.2) — This package is deprecated. Use the optional chaining (?.) operator instead.
• 🟡 moderate lodash.isequal (4.5.0) — This package is deprecated. Use require('node:util').isDeepStrictEqual instead.
• 🟡 moderate markdown-it (>=13.0.0 <14.1.1) — markdown-it is has a Regular Expression Denial of Service (ReDoS) advisory
• 🟡 moderate markdown-it (<=14.1.1) — markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations advisory
• 🟡 moderate markdown-it (<14.3.1) — markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds advisory
• 🟡 moderate mysql2 (<=3.23.0) — MySQL2: Unbounded zlib inflate in compressed MySQL protocol handler allows decompression-bomb DoS advisory
• 🟡 moderate node-domexception (1.0.0) — Use your platform's native DOMException instead
• 🟡 moderate pbkdf2 (<=3.1.6) — pbkdf2 rehashes long passwords on every iteration, enabling denial of service advisory
• 🟡 moderate picomatch (<2.3.2) — Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching advisory
• 🟡 moderate postcss (<=8.5.22) — PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset advisory
• 🟡 moderate postcss-selector-parser (<7.1.6) — PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion advisory
• 🟡 moderate prebuild-install (7.1.3) — No longer maintained. Please contact the author of the relevant native addon; alternatives are available.
• 🟡 moderate prismjs (<1.30.0) — PrismJS DOM Clobbering vulnerability advisory
• 🟡 moderate prom-client (15.1.3) — prom-client has been replaced by @prometheus-io/client
• 🟡 moderate qs (>=6.11.1 <=6.15.1) — qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set advisory
• 🟡 moderate qs (>=6.14.2 <=6.15.3) — qs array-limit bypass via bracket-key comma parsing advisory
• 🟡 moderate qs (>=2.2.5 <6.16.0) — qs: Denial of Service via Attacker Controlled isBuffer advisory
• 🟡 moderate react-beautiful-dnd (13.1.1) — react-beautiful-dnd is now deprecated. Context and options: react-beautiful-dnd is now deprecated atlassian/react-beautiful-dnd#2672
• 🟡 moderate react-router (>=6.0.0 <7.18.0) — React Router: Open redirect via backslash in and useNavigate (CVE-2025-68470 bypass) advisory
• 🟡 moderate react-router (>=6.4.0 <7.18.0) — React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration advisory
• 🟡 moderate rimraf (3.0.2) — Rimraf versions prior to v4 are no longer supported
• 🟡 moderate sprintf-js (<=1.1.3) — sprintf-js vulnerable to denial of service through unbounded precision specifiers advisory
• 🟡 moderate stable (0.1.8) — Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
• 🟡 moderate svgo (>=1.0.0 <2.8.4) — SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements advisory
• 🟡 moderate undici (>=7.28.0 <7.29.1) — undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression advisory
• 🟡 moderate undici (>=6.25.0 <6.28.1) — undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression advisory
• 🟡 moderate undici (>=7.11.0 <7.29.1) — undici vulnerable to Denial of Service via orphaned RetryHandler response body advisory
• 🟡 moderate undici (>=7.15.0 <7.29.1) — undici vulnerable to Denial of Service via unbounded decompression of compressed responses advisory
• 🟡 moderate undici (>=7.0.0 <7.29.1) — undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches advisory
• 🟡 moderate undici (>=7.0.0 <7.29.1) — undici vulnerable to Denial of Service via WebSocketStream unclean close advisory
• 🟡 moderate uuid (<11.1.1) — uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided advisory
• 🟡 moderate webpack-dev-server (<=5.2.3) — webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins advisory
• 🟡 moderate webpack-dev-server (<5.2.5) — webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies advisory
• 🟡 moderate webpack-dev-server (<=5.2.5) — webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints advisory
• 🟡 moderate webpack-dev-server (<=5.2.5) — webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header advisory
• 🟡 moderate yaml (>=1.0.0 <1.10.3) — yaml is vulnerable to Stack Overflow via deeply nested YAML collections advisory
• 🔵 low @backstage/backend-defaults (<0.17.8) — Backstage: Cloud storage catalog locations may cross configured storage boundaries advisory
• 🔵 low @backstage/integration (<=1.20.0) — Backstage vulnerable to potential reading of SCM URLs using built in token advisory
• 🔵 low @grpc/grpc-js (>=1.14.0 <1.14.5) — @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages advisory
• 🔵 low @smithy/config-resolver (<4.4.0) — AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value advisory
• 🔵 low @tootallnate/once (<2.0.1) — @tootallnate/once vulnerable to Incorrect Control Flow Scoping advisory
• 🔵 low body-parser (>=2.0.0 <2.3.0) — body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement advisory
• 🔵 low body-parser (<1.20.6) — body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement advisory
• 🔵 low cookie (<0.7.0) — cookie accepts cookie name, path, and domain with out of bounds characters advisory
• 🔵 low diff (>=4.0.0 <4.0.4) — jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch advisory
• 🔵 low diff (>=5.0.0 <5.2.2) — jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch advisory
• 🔵 low dompurify (<3.4.9) — DOMPurify: Trusted Types policy survives clearConfig() and can poison later RETURN_TRUSTED_TYPE output advisory
• 🔵 low dompurify (>=3.0.0 <=3.4.7) — DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside content when using DOM output modes advisory
• 🔵 low dompurify (<=3.4.6) — DOMPurify: IN_PLACE mode trusts attacker-controlled nodeName on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects advisory
• 🔵 low dompurify (<=3.4.11) — DOMPurify: CUSTOM_ELEMENT_HANDLING bypasses afterSanitizeElements for allowed custom elements. advisory
• 🔵 low dompurify (<=3.4.15) — DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes advisory
• 🔵 low elliptic (<6.6.0) — Valid ECDSA signatures erroneously rejected in Elliptic advisory
• 🔵 low elliptic (<=6.6.1) — Elliptic Uses a Cryptographic Primitive with a Risky Implementation advisory
• 🔵 low esbuild (>=0.27.3 <0.28.1) — esbuild allows arbitrary file read when running the development server on Windows advisory
• 🔵 low handlebars (>=4.0.0 <=4.7.8) — Handlebars.js has a Property Access Validation Bypass in container.lookup advisory
• 🔵 low hono (<4.12.18) — Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify() advisory
• 🔵 low hono (>=4.7.0 <4.12.34) — Hono: Proxy Helper does not remove response headers listed in the Connection header advisory
• 🔵 low katex (>=0.11.0 <0.18.2) — KaTeX: Existing prototype pollution can bypass trust restrictions advisory
• 🔵 low on-headers (<1.1.0) — on-headers is vulnerable to http response header manipulation advisory
• 🔵 low postcss-selector-parser (>=6.1.0 <6.1.3) — postcss-selector-parser allows denial of service through uncontrolled AST recursion advisory
• 🔵 low tmp (<=0.2.3) — tmp allows arbitrary temporary file / directory write via symbolic link dir parameter advisory
• 🔵 low undici (>=7.0.0 <7.29.1) — undici vulnerable to downstream response splitting via retry interceptor advisory
• 🔵 low undici (<6.28.1) — undici vulnerable to downstream response splitting via retry interceptor advisory
• 🔵 low undici (>=7.1.0 <7.29.1) — undici vulnerable to response truncation via oversized chunked responses in the dump interceptor advisory
• 🔵 low undici (>=7.0.0 <7.29.1) — undici vulnerable to caching and replay of unsafe HTTP method responses advisory

[circleci-architect]

Published Helm chart backstage

2.96.1-r4230f5aat20261013095049h2a34c5e

Chart	backstage
Version	2.96.1-r4230f5aat20261013095049h2a34c5e
OCI reference	oci://gsoci.azurecr.io/charts/giantswarm/backstage:2.96.1-r4230f5aat20261013095049h2a34c5e
Digest	sha256:4325e9e3e3ab040ee9173b800fe687345c0107201db514b4904ed646da5b0812
Registry	public — gsoci.azurecr.io
Git catalog	giantswarm-operations-platform-test-catalog (index)

Pull this chart

helm pull oci://gsoci.azurecr.io/charts/giantswarm/backstage --version 2.96.1-r4230f5aat20261013095049h2a34c5e

_{Posted by architect-orb · build 61236 · commit 2a34c5e · updated in place on every push}