Skip to content
Backstage vulnerabilities
Newest
-
backstage
Backstage catalog rules can be bypassed for URL locations using encoded path segments
CVE-2026-115923
Fix available
6.5 Medium
-
@backstage backend-defaults, backstage +1 more
Backstage: Improper access control in backend action invocation
CVE-2026-106495
Fix available
4.3 Medium
-
@backstage plugin-techdocs-node, backstage +1 more
Backstage: Improper input validation in TechDocs Markdown extension configuration
CVE-2026-106557
Fix available
7.7 High
-
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more
Backstage: Improper entity validation in deprecated Kubernetes services endpoint
CVE-2026-106563
Fix available
5.3 Medium
-
@backstage plugin-search-backend, plugin-search-backend-module-elasticsearch, backstage +2 more +4 more
Backstage: Incorrect authorization in search engine permission filtering
CVE-2026-106562
Fix available
4.3 Medium
-
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more
Backstage: Sensitive information disclosure in Kubernetes resource queries
CVE-2026-106561
Fix available
5.0 Medium
-
@backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more
Backstage: Improper repository path validation in a Scaffolder backend module
CVE-2026-106560
Fix available
7.1 High
-
@backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more
Backstage: Improper input validation in Confluence to Markdown scaffolder module
CVE-2026-106559
Fix available
6.3 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of TechDocs MkDocs configuration
CVE-2026-106558
Fix available
8.8 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
CVE-2026-106556
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
CVE-2026-106510
Fix available
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of MkDocs theme configuration in TechDocs
CVE-2026-106509
Fix available
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Potential file exposure through local TechDocs publisher
CVE-2026-106508
Fix available
5.3 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: TechDocs arbitrary file read via mkdocs snippets
CVE-2026-106507
5.3 Medium
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Improper input validation in scaffolder task list ordering
CVE-2026-106506
Fix available
5.3 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
CVE-2026-106505
Fix available
7.7 High
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Sensitive information exposure in scaffolder task logs
CVE-2026-106504
Fix available
6.5 Medium
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Scaffolder action input authorization bypass
CVE-2026-106503
Fix available
8.1 High
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Sensitive information may be exposed in Scaffolder task failure events
CVE-2026-106502
Fix available
5.3 Medium
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Sensitive information exposure in Scaffolder
CVE-2026-106501
Fix available
9.6 Critical
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Improper task state validation in Scaffolder backend
CVE-2026-106500
Fix available
8.5 High
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Secret-derived values may be exposed in scaffolder task logs
CVE-2026-106499
Fix available
4.9 Medium
-
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more
Backstage: Improper URL validation in catalog entity placeholder resolution
CVE-2026-106498
Fix available
7.7 High
-
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more
Backstage: Inconsistent catalog property permission evaluation
CVE-2026-106497
4.3 Medium
-
@backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more
Backstage: Inconsistent enforcement of allowed location types during catalog processing
CVE-2026-106496
Fix available
3.1 Low
-
@backstage backend-defaults, backstage, linuxfoundation backstage\/backend defaults +2 more
Backstage: Improper input validation in cloud storage URL readers
CVE-2026-106494
Fix available
4.4 Medium
-
backstage, @backstage plugin-catalog-backend-module-aws, plugin-catalog-backend-module-azure +3 more +5 more
Backstage: Cloud storage catalog locations may cross configured storage boundaries
CVE-2026-106493
Fix available
3.0 Low
-
@backstage backend-defaults, backstage, linuxfoundation backstage\/backend-defaults +2 more
Backstage: Improper preservation of access restrictions during service credential delegation
CVE-2026-106492
Fix available
7.6 High
-
@backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more
Backstage: Improper input validation in proxy-backend
CVE-2026-106491
Fix available
6.4 Medium
-
@backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more
Backstage: Improper input validation in TechDocs static content requests
CVE-2026-106490
Fix available
6.5 Medium
-
@backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more
Backstage: Improper authorization enforcement for TechDocs static content
CVE-2026-106489
Fix available
6.5 Medium
-
@backstage plugin-auth-backend-module-oidc-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-oidc-provider +2 more
Backstage: Improper authentication in the OIDC provider
CVE-2026-106488
Fix available
8.1 High
-
@backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more
Backstage: Unsupported catalog cluster authentication mode in kubernetes backend
CVE-2026-106487
Fix available
3.5 Low
-
@backstage plugin-scaffolder-backend-module-bitbucket-cloud, plugin-scaffolder-backend-module-bitbucket-server, backstage +2 more +4 more
Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions
CVE-2026-106486
Fix available
8.5 High
-
@backstage plugin-catalog-backend-module-gitlab, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-gitlab +2 more
Backstage: Improper authorization in GitLab organizational user ingestion
CVE-2026-106463
Fix available
5.4 Medium
-
backstage, @backstage plugin-scaffolder-backend, plugin-scaffolder-backend-module-azure +10 more +12 more
Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback
CVE-2026-106462
Fix available
6.4 Medium
-
@backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more
Backstage: Incorrect authorization in scaffolder task listing
CVE-2026-106461
Fix available
4.3 Medium
-
@backstage plugin-auth-node, backstage, linuxfoundation backstage\/plugin-auth-node +2 more
Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization
CVE-2026-106460
Fix available
6.8 Medium
-
@backstage plugin-scaffolder-backend-module-sentry, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-sentry +2 more
Backstage: Improper input validation in Sentry scaffolder actions
CVE-2026-106459
Fix available
8.5 High
-
@backstage plugin-catalog-backend-module-bitbucket-server, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-bitbucket-server +2 more
Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
CVE-2026-106458
Fix available
6.5 Medium
-
@backstage plugin-auth-backend-module-cloudflare-access-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-cloudflare-access-provider +2 more
Backstage: Insufficient audience validation in the Cloudflare Access auth provider
CVE-2026-106457
Fix available
6.8 Medium
-
@backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more
Backstage: Inconsistent credential enforcement for overlapping proxy routes
CVE-2026-106456
Fix available
4.8 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of MkDocs plugin configuration in TechDocs
CVE-2026-106455
Fix available
7.7 High
-
backstage, linuxfoundation backstage plugin-techdocs-node +1 more
Backstage: Improper input validation in TechDocs MkDocs configuration
CVE-2026-88064
8.8 High
-
backstage, linuxfoundation backstage\/plugin-auth-backend +1 more
Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`
CVE-2026-73563
Fix available
4.7 Medium
-
backstage, linuxfoundation backstage\/plugin-scaffolder-backend +1 more
@backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass
CVE-2026-29184
Fix available
2.0 Low
-
backstage, linuxfoundation backstage\/integration +1 more
@backstage/integration: Potential reading of SCM URLs using built in token
CVE-2026-29185
Fix available
2.7 Low
-
backstage, linuxfoundation backstage plugin-techdocs-node, red hat developer hub 1.8 +2 more +4 more
@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
CVE-2026-29186
Fix available
7.7 High
-
backstage
@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator
CVE-2026-25152
Fix available
5.3 Medium
-
backstage, red hat developer hub 1.8, developer hub 1.9 +1 more +3 more
@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks
CVE-2026-25153
Fix available
7.7 High
- Show olderLoading…