[ Vendor · 83 CVEs ]
backstage
CVEs affecting backstage published in the last 30 days, plus any backstage CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-106495 | 12 Oct 2026 | CVSS 4.3 | Backstage: Improper access control in backend action invocationBackstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper… | Fix |
| CVE-2026-106495 | 12 Oct 2026 | CVSS 4.3 | Backstage: Improper access control in backend action invocationBackstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper… | Fix |
| CVE-2026-106557 | 7 Oct 2026 | CVSS 7.7 | Backstage has improper input validation in TechDocs Markdown extension configurationBackstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not… | Fix |
| CVE-2026-106557 | 7 Oct 2026 | CVSS 7.7 | Backstage has improper input validation in TechDocs Markdown extension configurationBackstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not… | Fix |
| CVE-2026-106559 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper input validation in Confluence to Markdown scaffolder moduleBackstage is an open framework for building developer portals. Prior to 0.3.25, the… | Fix |
| CVE-2026-106559 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper input validation in Confluence to Markdown scaffolder moduleBackstage is an open framework for building developer portals. Prior to 0.3.25, the… | Fix |
| CVE-2026-106560 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper repository path validation in a Scaffolder backend moduleBackstage is an open framework for building developer portals. Prior to 0.3.25, the… | Fix |
| CVE-2026-106560 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper repository path validation in a Scaffolder backend moduleBackstage is an open framework for building developer portals. Prior to 0.3.25, the… | Fix |
| CVE-2026-106561 | 7 Oct 2026 | CVSS 5.0 | Backstage has a sensitive information disclosure in Kubernetes resource queriesBackstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106561 | 7 Oct 2026 | CVSS 5.0 | Backstage has a sensitive information disclosure in Kubernetes resource queriesBackstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106562 | 7 Oct 2026 | CVSS 4.3 | Backstage has incorrect authorization in search engine permission filteringBackstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in… | Fix |
| CVE-2026-106562 | 7 Oct 2026 | CVSS 4.3 | Backstage has incorrect authorization in search engine permission filteringBackstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in… | Fix |
| CVE-2026-106563 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper entity validation in deprecated Kubernetes services endpointBackstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106563 | 7 Oct 2026 | CVSS 6.5 | Backstage: Improper entity validation in deprecated Kubernetes services endpointBackstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106558 | 7 Oct 2026 | CVSS 8.8 | Backstage: Improper validation of TechDocs MkDocs configurationBackstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package… | Fix |
| CVE-2026-106558 | 7 Oct 2026 | CVSS 8.8 | Backstage: Improper validation of TechDocs MkDocs configurationBackstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package… | Fix |
| CVE-2026-106510 | 7 Oct 2026 | CVSS 7.7 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.ymlBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by remote… | Fix |
| CVE-2026-106510 | 7 Oct 2026 | CVSS 7.7 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.ymlBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by remote… | Fix |
| CVE-2026-106556 | 7 Oct 2026 | CVSS 7.7 | backstageBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by… | Fix |
| CVE-2026-106556 | 7 Oct 2026 | CVSS 7.7 | backstageBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by… | Fix |
| CVE-2026-106507 | 6 Oct 2026 | CVSS 6.5 | backstageBackstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs… | Fix |
| CVE-2026-106508 | 6 Oct 2026 | CVSS 6.5 | Backstage has potential file exposure through local TechDocs publisherBackstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential… | Fix |
| CVE-2026-106508 | 6 Oct 2026 | CVSS 6.5 | Backstage has potential file exposure through local TechDocs publisherBackstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential… | Fix |
| CVE-2026-106509 | 6 Oct 2026 | CVSS 8.8 | Backstage: Improper validation of MkDocs theme configuration in TechDocsBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper… | Fix |
| CVE-2026-106509 | 6 Oct 2026 | CVSS 8.8 | Backstage: Improper validation of MkDocs theme configuration in TechDocsBackstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper… | Fix |
| CVE-2026-106500 | 6 Oct 2026 | CVSS 8.5 | Backstage: Improper task state validation in Scaffolder backendBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106500 | 6 Oct 2026 | CVSS 8.5 | Backstage: Improper task state validation in Scaffolder backendBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106501 | 6 Oct 2026 | CVSS 9.6 | Backstage: Sensitive information exposure in ScaffolderBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106501 | 6 Oct 2026 | CVSS 9.6 | Backstage: Sensitive information exposure in ScaffolderBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106502 | 6 Oct 2026 | CVSS 5.3 | Backstage may expose sensitive information in Scaffolder task failure eventsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose… | Fix |
| CVE-2026-106502 | 6 Oct 2026 | CVSS 5.3 | Backstage may expose sensitive information in Scaffolder task failure eventsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose… | Fix |
| CVE-2026-106503 | 6 Oct 2026 | CVSS 8.1 | Backstage: Scaffolder action input authorization bypassBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106503 | 6 Oct 2026 | CVSS 8.1 | Backstage: Scaffolder action input authorization bypassBackstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend… | Fix |
| CVE-2026-106504 | 6 Oct 2026 | CVSS 6.5 | Backstage has sensitive information exposure in scaffolder task logsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106504 | 6 Oct 2026 | CVSS 6.5 | Backstage has sensitive information exposure in scaffolder task logsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106505 | 6 Oct 2026 | CVSS 8.5 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backendBackstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by… | Fix |
| CVE-2026-106505 | 6 Oct 2026 | CVSS 8.5 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backendBackstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by… | Fix |
| CVE-2026-106506 | 6 Oct 2026 | CVSS 5.3 | Backstage has improper input validation in scaffolder task list orderingBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106506 | 6 Oct 2026 | CVSS 5.3 | Backstage has improper input validation in scaffolder task list orderingBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106496 | 6 Oct 2026 | CVSS 6.5 | Backstage: Inconsistent enforcement of allowed location types during catalog processingBackstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by… | Fix |
| CVE-2026-106496 | 6 Oct 2026 | CVSS 6.5 | Backstage: Inconsistent enforcement of allowed location types during catalog processingBackstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by… | Fix |
| CVE-2026-106497 | 6 Oct 2026 | CVSS 4.3 | backstageBackstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by… | Fix |
| CVE-2026-106497 | 6 Oct 2026 | CVSS 4.3 | backstageBackstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by… | Fix |
| CVE-2026-106498 | 6 Oct 2026 | CVSS 7.7 | Backstage: Improper URL validation in catalog entity placeholder resolutionBackstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend… | Fix |
| CVE-2026-106498 | 6 Oct 2026 | CVSS 7.7 | Backstage: Improper URL validation in catalog entity placeholder resolutionBackstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend… | Fix |
| CVE-2026-106499 | 6 Oct 2026 | CVSS 4.9 | Backstage: Secret-derived values may be exposed in scaffolder task logsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose… | Fix |
| CVE-2026-106499 | 6 Oct 2026 | CVSS 4.9 | Backstage: Secret-derived values may be exposed in scaffolder task logsBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose… | Fix |
| CVE-2026-106491 | 6 Oct 2026 | CVSS 6.4 | Backstage: Improper input validation in proxy-backendBackstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper… | Fix |
| CVE-2026-106491 | 6 Oct 2026 | CVSS 6.4 | Backstage: Improper input validation in proxy-backendBackstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper… | Fix |
| CVE-2026-106492 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper preservation of access restrictions during service credential delegationBackstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by… | Fix |
| CVE-2026-106492 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper preservation of access restrictions during service credential delegationBackstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by… | Fix |
| CVE-2026-106493 | 6 Oct 2026 | CVSS 4.1 | Backstage: Cloud storage catalog locations may cross configured storage boundariesBackstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object… | Fix |
| CVE-2026-106493 | 6 Oct 2026 | CVSS 4.1 | Backstage: Cloud storage catalog locations may cross configured storage boundariesBackstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object… | Fix |
| CVE-2026-106494 | 6 Oct 2026 | CVSS 4.9 | Backstage: Improper input validation in cloud storage URL readersBackstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input… | Fix |
| CVE-2026-106494 | 6 Oct 2026 | CVSS 4.9 | Backstage: Improper input validation in cloud storage URL readersBackstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input… | Fix |
| CVE-2026-106462 | 6 Oct 2026 | CVSS 6.4 | Backstage's scaffolder credential handling may allow unintended GitHub authentication fallbackBackstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce… | Fix |
| CVE-2026-106462 | 6 Oct 2026 | CVSS 6.4 | Backstage's scaffolder credential handling may allow unintended GitHub authentication fallbackBackstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce… | Fix |
| CVE-2026-106463 | 6 Oct 2026 | CVSS 5.4 | Backstage has improper authorization in GitLab organizational user ingestionBackstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is… | Fix |
| CVE-2026-106463 | 6 Oct 2026 | CVSS 5.4 | Backstage has improper authorization in GitLab organizational user ingestionBackstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is… | Fix |
| CVE-2026-106486 | 6 Oct 2026 | CVSS 8.5 | Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actionsBackstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and… | Fix |
| CVE-2026-106486 | 6 Oct 2026 | CVSS 8.5 | Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actionsBackstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and… | Fix |
| CVE-2026-106487 | 6 Oct 2026 | CVSS 5.0 | Backstage: Unsupported catalog cluster authentication mode in kubernetes backendBackstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106487 | 6 Oct 2026 | CVSS 5.0 | Backstage: Unsupported catalog cluster authentication mode in kubernetes backendBackstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by… | Fix |
| CVE-2026-106488 | 6 Oct 2026 | CVSS 8.1 | Backstage: Improper authentication in the OIDC providerBackstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is… | Fix |
| CVE-2026-106488 | 6 Oct 2026 | CVSS 8.1 | Backstage: Improper authentication in the OIDC providerBackstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is… | Fix |
| CVE-2026-106489 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper authorization enforcement for TechDocs static contentBackstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper… | Fix |
| CVE-2026-106489 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper authorization enforcement for TechDocs static contentBackstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper… | Fix |
| CVE-2026-106490 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper input validation in TechDocs static content requestsBackstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper… | Fix |
| CVE-2026-106490 | 6 Oct 2026 | CVSS 6.5 | Backstage: Improper input validation in TechDocs static content requestsBackstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper… | Fix |
| CVE-2026-106457 | 6 Oct 2026 | CVSS 6.8 | Backstage: Insufficient audience validation in the Cloudflare Access auth providerBackstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the… | Fix |
| CVE-2026-106457 | 6 Oct 2026 | CVSS 6.8 | Backstage: Insufficient audience validation in the Cloudflare Access auth providerBackstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the… | Fix |
| CVE-2026-106458 | 6 Oct 2026 | CVSS 6.5 | Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updatesBackstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server… | Fix |
| CVE-2026-106458 | 6 Oct 2026 | CVSS 6.5 | Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updatesBackstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server… | Fix |
| CVE-2026-106459 | 6 Oct 2026 | CVSS 8.5 | Backstage: Improper input validation in Sentry scaffolder actionsBackstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package… | Fix |
| CVE-2026-106459 | 6 Oct 2026 | CVSS 8.5 | Backstage: Improper input validation in Sentry scaffolder actionsBackstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package… | Fix |
| CVE-2026-106460 | 6 Oct 2026 | CVSS 6.8 | Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalizationBackstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not… | Fix |
| CVE-2026-106460 | 6 Oct 2026 | CVSS 6.8 | Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalizationBackstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not… | Fix |
| CVE-2026-106461 | 6 Oct 2026 | CVSS 4.3 | Backstage: Incorrect authorization in scaffolder task listingBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106461 | 6 Oct 2026 | CVSS 4.3 | Backstage: Incorrect authorization in scaffolder task listingBackstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by… | Fix |
| CVE-2026-106455 | 6 Oct 2026 | CVSS 7.7 | Backstage: Improper validation of MkDocs plugin configuration in TechDocsBackstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is… | Fix |
| CVE-2026-106455 | 6 Oct 2026 | CVSS 7.7 | Backstage: Improper validation of MkDocs plugin configuration in TechDocsBackstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is… | Fix |
| CVE-2026-106456 | 6 Oct 2026 | CVSS 4.8 | Backstage: Inconsistent credential enforcement for overlapping proxy routesBackstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by… | Fix |
| CVE-2026-106456 | 6 Oct 2026 | CVSS 4.8 | Backstage: Inconsistent credential enforcement for overlapping proxy routesBackstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by… | Fix |