Linuxfoundation Backstage vulnerabilities

• @backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Improper entity validation in deprecated Kubernetes services endpoint CVE-2026-106563 Fix available 5.3 MediumOctober 7, 2026
• @backstage plugin-search-backend, plugin-search-backend-module-elasticsearch, backstage +2 more +4 more Backstage: Incorrect authorization in search engine permission filtering CVE-2026-106562 Fix available 4.3 MediumOctober 7, 2026
• @backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Sensitive information disclosure in Kubernetes resource queries CVE-2026-106561 Fix available 5.0 MediumOctober 7, 2026
• @backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more Backstage: Improper repository path validation in a Scaffolder backend module CVE-2026-106560 Fix available 7.1 HighOctober 7, 2026
• @backstage plugin-scaffolder-backend-module-confluence-to-markdown, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-confluence-to-markdown +2 more Backstage: Improper input validation in Confluence to Markdown scaffolder module CVE-2026-106559 Fix available 6.3 MediumOctober 7, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of TechDocs MkDocs configuration CVE-2026-106558 Fix available 8.8 HighOctober 7, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization CVE-2026-106556 7.7 HighOctober 7, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml CVE-2026-106510 Fix available 7.7 HighOctober 7, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of MkDocs theme configuration in TechDocs CVE-2026-106509 Fix available 7.7 HighOctober 6, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Potential file exposure through local TechDocs publisher CVE-2026-106508 Fix available 5.3 MediumOctober 6, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: TechDocs arbitrary file read via mkdocs snippets CVE-2026-106507 5.3 MediumOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Improper input validation in scaffolder task list ordering CVE-2026-106506 Fix available 5.3 MediumOctober 6, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend CVE-2026-106505 Fix available 7.7 HighOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information exposure in scaffolder task logs CVE-2026-106504 Fix available 6.5 MediumOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Scaffolder action input authorization bypass CVE-2026-106503 Fix available 8.1 HighOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information may be exposed in Scaffolder task failure events CVE-2026-106502 Fix available 5.3 MediumOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Sensitive information exposure in Scaffolder CVE-2026-106501 Fix available 9.6 CriticalOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Improper task state validation in Scaffolder backend CVE-2026-106500 Fix available 8.5 HighOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Secret-derived values may be exposed in scaffolder task logs CVE-2026-106499 Fix available 4.9 MediumOctober 6, 2026
• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Improper URL validation in catalog entity placeholder resolution CVE-2026-106498 Fix available 7.7 HighOctober 6, 2026
• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent catalog property permission evaluation CVE-2026-106497 4.3 MediumOctober 6, 2026
• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent enforcement of allowed location types during catalog processing CVE-2026-106496 Fix available 3.1 LowOctober 6, 2026
• @backstage backend-defaults, backstage, linuxfoundation backstage\/backend defaults +2 more Backstage: Improper input validation in cloud storage URL readers CVE-2026-106494 Fix available 4.4 MediumOctober 6, 2026
• backstage, @backstage plugin-catalog-backend-module-aws, plugin-catalog-backend-module-azure +3 more +5 more Backstage: Cloud storage catalog locations may cross configured storage boundaries CVE-2026-106493 Fix available 3.0 LowOctober 6, 2026
• @backstage backend-defaults, backstage, linuxfoundation backstage\/backend-defaults +2 more Backstage: Improper preservation of access restrictions during service credential delegation CVE-2026-106492 Fix available 7.6 HighOctober 6, 2026
• @backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more Backstage: Improper input validation in proxy-backend CVE-2026-106491 Fix available 6.4 MediumOctober 6, 2026
• @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more Backstage: Improper input validation in TechDocs static content requests CVE-2026-106490 Fix available 6.5 MediumOctober 6, 2026
• @backstage plugin-techdocs-backend, backstage, linuxfoundation backstage\/plugin-techdocs-backend +2 more Backstage: Improper authorization enforcement for TechDocs static content CVE-2026-106489 Fix available 6.5 MediumOctober 6, 2026
• @backstage plugin-auth-backend-module-oidc-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-oidc-provider +2 more Backstage: Improper authentication in the OIDC provider CVE-2026-106488 Fix available 8.1 HighOctober 6, 2026
• @backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Unsupported catalog cluster authentication mode in kubernetes backend CVE-2026-106487 Fix available 3.5 LowOctober 6, 2026
• @backstage plugin-scaffolder-backend-module-bitbucket-cloud, plugin-scaffolder-backend-module-bitbucket-server, backstage +2 more +4 more Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions CVE-2026-106486 Fix available 8.5 HighOctober 6, 2026
• @backstage plugin-catalog-backend-module-gitlab, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-gitlab +2 more Backstage: Improper authorization in GitLab organizational user ingestion CVE-2026-106463 Fix available 5.4 MediumOctober 6, 2026
• backstage, @backstage plugin-scaffolder-backend, plugin-scaffolder-backend-module-azure +10 more +12 more Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback CVE-2026-106462 Fix available 6.4 MediumOctober 6, 2026
• @backstage plugin-scaffolder-backend, backstage, linuxfoundation backstage\/plugin-scaffolder-backend +2 more Backstage: Incorrect authorization in scaffolder task listing CVE-2026-106461 Fix available 4.3 MediumOctober 6, 2026
• @backstage plugin-auth-node, backstage, linuxfoundation backstage\/plugin-auth-node +2 more Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization CVE-2026-106460 Fix available 6.8 MediumOctober 6, 2026
• @backstage plugin-scaffolder-backend-module-sentry, backstage, linuxfoundation backstage\/plugin-scaffolder-backend-module-sentry +2 more Backstage: Improper input validation in Sentry scaffolder actions CVE-2026-106459 Fix available 8.5 HighOctober 6, 2026
• @backstage plugin-catalog-backend-module-bitbucket-server, backstage, linuxfoundation backstage\/plugin-catalog-backend-module-bitbucket-server +2 more Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates CVE-2026-106458 Fix available 6.5 MediumOctober 6, 2026
• @backstage plugin-auth-backend-module-cloudflare-access-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-cloudflare-access-provider +2 more Backstage: Insufficient audience validation in the Cloudflare Access auth provider CVE-2026-106457 Fix available 6.8 MediumOctober 6, 2026
• @backstage plugin-proxy-backend, backstage, linuxfoundation backstage\/plugin-proxy-backend +2 more Backstage: Inconsistent credential enforcement for overlapping proxy routes CVE-2026-106456 Fix available 4.8 MediumOctober 6, 2026
• @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Improper validation of MkDocs plugin configuration in TechDocs CVE-2026-106455 Fix available 7.7 HighOctober 6, 2026
• backstage, linuxfoundation backstage plugin-techdocs-node +1 more Backstage: Improper input validation in TechDocs MkDocs configuration CVE-2026-88064 8.8 HighSeptember 16, 2026
• backstage, linuxfoundation backstage\/plugin-auth-backend +1 more Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend` CVE-2026-73563 Fix available 4.7 MediumJuly 24, 2026
• @backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 more Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks CVE-2026-44374 Fix available 4.3 MediumMay 6, 2026
• @backstage plugin-scaffolder-backend, linuxfoundation backstage\/plugin-scaffolder-backend +1 more @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint CVE-2026-32237 Fix available 4.4 MediumMarch 12, 2026
• @backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch CVE-2026-32236 Fix available 1.7 LowMarch 12, 2026
• @backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass CVE-2026-32235 Fix available 5.9 MediumMarch 12, 2026
• backstage, linuxfoundation backstage\/plugin-scaffolder-backend +1 more @backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass CVE-2026-29184 Fix available 2.0 LowMarch 5, 2026
• backstage, linuxfoundation backstage\/integration +1 more @backstage/integration: Potential reading of SCM URLs using built in token CVE-2026-29185 Fix available 2.7 LowMarch 5, 2026
• backstage, linuxfoundation backstage plugin-techdocs-node, red hat developer hub 1.8 +2 more +4 more @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution CVE-2026-29186 Fix available 7.7 HighMarch 5, 2026
• backstage @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator CVE-2026-25152 Fix available 5.3 MediumJanuary 30, 2026
• Show olderLoading…