Skip to content

@backstage vulnerabilities

Products

Newest

@backstage backend-defaults, backstage +1 more Backstage: Improper access control in backend action invocation CVE-2026-106495 Fix available 4.3 MediumOctober 12, 2026
@backstage plugin-techdocs-node, backstage +1 more Backstage: Improper input validation in TechDocs Markdown extension configuration CVE-2026-106557 Fix available 7.7 HighOctober 7, 2026
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Improper entity validation in deprecated Kubernetes services endpoint CVE-2026-106563 Fix available 5.3 MediumOctober 7, 2026
@backstage plugin-search-backend, plugin-search-backend-module-elasticsearch, backstage +2 more +4 more Backstage: Incorrect authorization in search engine permission filtering CVE-2026-106562 Fix available 4.3 MediumOctober 7, 2026
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Sensitive information disclosure in Kubernetes resource queries CVE-2026-106561 Fix available 5.0 MediumOctober 7, 2026
@backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more Backstage: Improper repository path validation in a Scaffolder backend module CVE-2026-106560 Fix available 7.1 HighOctober 7, 2026
@backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more Backstage: Improper input validation in Confluence to Markdown scaffolder module CVE-2026-106559 Fix available 6.3 MediumOctober 7, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of TechDocs MkDocs configuration CVE-2026-106558 Fix available 8.8 HighOctober 7, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization CVE-2026-106556 7.7 HighOctober 7, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml CVE-2026-106510 Fix available 7.7 HighOctober 7, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of MkDocs theme configuration in TechDocs CVE-2026-106509 Fix available 7.7 HighOctober 6, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Potential file exposure through local TechDocs publisher CVE-2026-106508 Fix available 5.3 MediumOctober 6, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: TechDocs arbitrary file read via mkdocs snippets CVE-2026-106507 5.3 MediumOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Improper input validation in scaffolder task list ordering CVE-2026-106506 Fix available 5.3 MediumOctober 6, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend CVE-2026-106505 Fix available 7.7 HighOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information exposure in scaffolder task logs CVE-2026-106504 Fix available 6.5 MediumOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Scaffolder action input authorization bypass CVE-2026-106503 Fix available 8.1 HighOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information may be exposed in Scaffolder task failure events CVE-2026-106502 Fix available 5.3 MediumOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information exposure in Scaffolder CVE-2026-106501 Fix available 9.6 CriticalOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Improper task state validation in Scaffolder backend CVE-2026-106500 Fix available 8.5 HighOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Secret-derived values may be exposed in scaffolder task logs CVE-2026-106499 Fix available 4.9 MediumOctober 6, 2026
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Improper URL validation in catalog entity placeholder resolution CVE-2026-106498 Fix available 7.7 HighOctober 6, 2026
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent catalog property permission evaluation CVE-2026-106497 4.3 MediumOctober 6, 2026
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent enforcement of allowed location types during catalog processing CVE-2026-106496 Fix available 3.1 LowOctober 6, 2026
@backstage backend-defaults, backstage, linuxfoundation backstage\/backend defaults +2 more Backstage: Improper input validation in cloud storage URL readers CVE-2026-106494 Fix available 4.4 MediumOctober 6, 2026
backstage, @backstage plugin-catalog-backend-module-aws, plugin-catalog-backend-module-azure +3 more +5 more Backstage: Cloud storage catalog locations may cross configured storage boundaries CVE-2026-106493 Fix available 3.0 LowOctober 6, 2026
@backstage backend-defaults, backstage, linuxfoundation backstage\/backend-defaults +2 more Backstage: Improper preservation of access restrictions during service credential delegation CVE-2026-106492 Fix available 7.6 HighOctober 6, 2026
@backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more Backstage: Improper input validation in proxy-backend CVE-2026-106491 Fix available 6.4 MediumOctober 6, 2026
@backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more Backstage: Improper input validation in TechDocs static content requests CVE-2026-106490 Fix available 6.5 MediumOctober 6, 2026
@backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more Backstage: Improper authorization enforcement for TechDocs static content CVE-2026-106489 Fix available 6.5 MediumOctober 6, 2026
@backstage plugin-auth-backend-module-oidc-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-oidc-provider +2 more Backstage: Improper authentication in the OIDC provider CVE-2026-106488 Fix available 8.1 HighOctober 6, 2026
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Unsupported catalog cluster authentication mode in kubernetes backend CVE-2026-106487 Fix available 3.5 LowOctober 6, 2026
@backstage plugin-scaffolder-backend-module-bitbucket-cloud, plugin-scaffolder-backend-module-bitbucket-server, backstage +2 more +4 more Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions CVE-2026-106486 Fix available 8.5 HighOctober 6, 2026
@backstage plugin-catalog-backend-module-gitlab, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-gitlab +2 more Backstage: Improper authorization in GitLab organizational user ingestion CVE-2026-106463 Fix available 5.4 MediumOctober 6, 2026
backstage, @backstage plugin-scaffolder-backend, plugin-scaffolder-backend-module-azure +10 more +12 more Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback CVE-2026-106462 Fix available 6.4 MediumOctober 6, 2026
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Incorrect authorization in scaffolder task listing CVE-2026-106461 Fix available 4.3 MediumOctober 6, 2026
@backstage plugin-auth-node, backstage, linuxfoundation backstage\/plugin-auth-node +2 more Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization CVE-2026-106460 Fix available 6.8 MediumOctober 6, 2026
@backstage plugin-scaffolder-backend-module-sentry, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-sentry +2 more Backstage: Improper input validation in Sentry scaffolder actions CVE-2026-106459 Fix available 8.5 HighOctober 6, 2026
@backstage plugin-catalog-backend-module-bitbucket-server, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-bitbucket-server +2 more Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates CVE-2026-106458 Fix available 6.5 MediumOctober 6, 2026
@backstage plugin-auth-backend-module-cloudflare-access-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-cloudflare-access-provider +2 more Backstage: Insufficient audience validation in the Cloudflare Access auth provider CVE-2026-106457 Fix available 6.8 MediumOctober 6, 2026
@backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more Backstage: Inconsistent credential enforcement for overlapping proxy routes CVE-2026-106456 Fix available 4.8 MediumOctober 6, 2026
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of MkDocs plugin configuration in TechDocs CVE-2026-106455 Fix available 7.7 HighOctober 6, 2026
@backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 more Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks CVE-2026-44374 Fix available 4.3 MediumMay 6, 2026
@backstage plugin-scaffolder-backend, linuxfoundation backstage\/plugin-scaffolder-backend +1 more @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint CVE-2026-32237 Fix available 4.4 MediumMarch 12, 2026
@backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch CVE-2026-32236 Fix available 1.7 LowMarch 12, 2026
@backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass CVE-2026-32235 Fix available 5.9 MediumMarch 12, 2026