@backstage/plugin-scaffolder-node vulnerabilities (npm)

2 vulnerabilities.

• @backstage/plugin-scaffolder-node npm Backstage has a Possible Symlink Path Traversal in Scaffolder Actions CVE-2026-24046 Public exploitFix available 7.1 HighJanuary 21, 2026
• @backstage/plugin-scaffolder-node npm Server-side request forgery in Backstage Scaffolder plugin CVE-2024-53983 Fix available 5.4 MediumNovember 29, 2024