BA
Vendor
backstage
116
CVEs
0
On KEV
92
New 30D
Products
BA9.9
backstage
backstage
61 CVEs0 on KEV43 new
PL9.6
plugin-scaffolder-backend
@backstage
10 CVEs0 on KEV9 new
PL8.8
plugin-techdocs-node
@backstage
8 CVEs0 on KEV8 new
PL9.9
plugin-scaffolder-backend-module-bitbucket-cloud
@backstage
2 CVEs0 on KEV2 new
PL9.9
plugin-scaffolder-backend-module-bitbucket-server
@backstage
2 CVEs0 on KEV2 new
BA6.5
backend-defaults
@backstage
3 CVEs0 on KEV3 new
PL7.7
plugin-catalog-backend
@backstage
3 CVEs0 on KEV3 new
PL6.5
plugin-kubernetes-backend
@backstage
3 CVEs0 on KEV3 new
PL6.5
plugin-proxy-backend
@backstage
2 CVEs0 on KEV2 new
PL6.5
plugin-scaffolder-backend-module-confluence-to-markdown
@backstage
2 CVEs0 on KEV2 new
PL6.5
plugin-techdocs-backend
@backstage
2 CVEs0 on KEV2 new
PL8.1
plugin-auth-backend-module-cloudflare-access-provider
@backstage
1 CVEs0 on KEV1 new
PL8.1
plugin-auth-backend-module-oidc-provider
@backstage
1 CVEs0 on KEV1 new
PL6.8
plugin-auth-node
@backstage
1 CVEs0 on KEV1 new
PL4.1
plugin-catalog-backend-module-aws
@backstage
1 CVEs0 on KEV1 new
PL4.1
plugin-catalog-backend-module-azure
@backstage
1 CVEs0 on KEV1 new
PL6.5
plugin-catalog-backend-module-bitbucket-server
@backstage
1 CVEs0 on KEV1 new
PL5.4
plugin-catalog-backend-module-gitlab
@backstage
1 CVEs0 on KEV1 new
PL6.4
plugin-scaffolder-backend-module-azure
@backstage
1 CVEs0 on KEV1 new
PL6.4
plugin-scaffolder-backend-module-github
@backstage
1 CVEs0 on KEV1 new
PL6.4
plugin-scaffolder-backend-module-gitlab
@backstage
1 CVEs0 on KEV1 new
PL8.5
plugin-scaffolder-backend-module-sentry
@backstage
1 CVEs0 on KEV1 new
PL4.3
plugin-search-backend
@backstage
1 CVEs0 on KEV1 new
PL4.3
plugin-search-backend-module-elasticsearch
@backstage
1 CVEs0 on KEV1 new
PL7.5
plugin-auth-backend
@backstage
2 CVEs0 on KEV0 new
PL4.3
plugin-catalog-backend-module-unprocessed
@backstage
1 CVEs0 on KEV0 new
PL4.3
plugin-catalog-unprocessed-entities
@backstage
1 CVEs0 on KEV0 new
PL4.3
plugin-catalog-unprocessed-entities-common
@backstage
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115923 New | BA backstage backstage | 6.5 | Oct 26 | Backstage catalog rules can be bypassed for URL locations using encoded path segments |
| CVE-2026-106495 | BA backstage backstage | 4.3 | Oct 12 | Backstage: Improper access control in backend action invocation |
| CVE-2026-106557 | BA backstage backstage | 7.7 | Oct 7 | Backstage: Improper input validation in TechDocs Markdown extension configuration |
| CVE-2026-106563 | PL plugin-kubernetes-backend @backstage | 6.5 | Oct 7 | Backstage: Improper entity validation in deprecated Kubernetes services endpoint |
| CVE-2026-106562 | BA backstage backstage | 4.3 | Oct 7 | Backstage: Incorrect authorization in search engine permission filtering |
| CVE-2026-106561 | PL plugin-kubernetes-backend @backstage | 5.0 | Oct 7 | Backstage: Sensitive information disclosure in Kubernetes resource queries |
| CVE-2026-106560 | PL plugin-scaffolder-backend-module-confluence-to-markdown @backstage | 6.5 | Oct 7 | Backstage: Improper repository path validation in a Scaffolder backend module |
| CVE-2026-106559 | PL plugin-scaffolder-backend-module-confluence-to-markdown @backstage | 6.5 | Oct 7 | Backstage: Improper input validation in Confluence to Markdown scaffolder module |
| CVE-2026-106558 | BA backstage backstage | 8.8 | Oct 7 | Backstage: Improper validation of TechDocs MkDocs configuration |
| CVE-2026-106556 | BA backstage backstage | 7.7 | Oct 7 | Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization |
| CVE-2026-106510 | PL plugin-techdocs-node @backstage | 7.7 | Oct 7 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml |
| CVE-2026-106509 | BA backstage backstage | 8.8 | Oct 6 | Backstage: Improper validation of MkDocs theme configuration in TechDocs |
| CVE-2026-106508 | BA backstage backstage | 6.5 | Oct 6 | Backstage: Potential file exposure through local TechDocs publisher |
| CVE-2026-106507 | BA backstage backstage | 6.5 | Oct 6 | Backstage: TechDocs arbitrary file read via mkdocs snippets |
| CVE-2026-106506 | BA backstage backstage | 5.3 | Oct 6 | Backstage: Improper input validation in scaffolder task list ordering |
| CVE-2026-106505 | BA backstage backstage | 8.5 | Oct 6 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend |
| CVE-2026-106504 | PL plugin-scaffolder-backend @backstage | 6.5 | Oct 6 | Backstage: Sensitive information exposure in scaffolder task logs |
| CVE-2026-106503 | BA backstage backstage | 8.1 | Oct 6 | Backstage: Scaffolder action input authorization bypass |
| CVE-2026-106502 | BA backstage backstage | 5.3 | Oct 6 | Backstage: Sensitive information may be exposed in Scaffolder task failure events |
| CVE-2026-106501 | PL plugin-scaffolder-backend @backstage | 9.6 | Oct 6 | Backstage: Sensitive information exposure in Scaffolder |
| CVE-2026-106500 | BA backstage backstage | 8.5 | Oct 6 | Backstage: Improper task state validation in Scaffolder backend |
| CVE-2026-106499 | BA backstage backstage | 4.9 | Oct 6 | Backstage: Secret-derived values may be exposed in scaffolder task logs |
| CVE-2026-106498 | PL plugin-catalog-backend @backstage | 7.7 | Oct 6 | Backstage: Improper URL validation in catalog entity placeholder resolution |
| CVE-2026-106497 | PL plugin-catalog-backend @backstage | 4.3 | Oct 6 | Backstage: Inconsistent catalog property permission evaluation |
| CVE-2026-106496 | BA backstage backstage | 6.5 | Oct 6 | Backstage: Inconsistent enforcement of allowed location types during catalog processing |
| CVE-2026-106494 | BA backstage backstage | 4.9 | Oct 6 | Backstage: Improper input validation in cloud storage URL readers |
| CVE-2026-106493 | PL plugin-catalog-backend-module-aws @backstage | 4.1 | Oct 6 | Backstage: Cloud storage catalog locations may cross configured storage boundaries |
| CVE-2026-106492 | BA backstage backstage | 6.5 | Oct 6 | Backstage: Improper preservation of access restrictions during service credential delegation |
| CVE-2026-106491 | PL plugin-proxy-backend @backstage | 6.4 | Oct 6 | Backstage: Improper input validation in proxy-backend |
| CVE-2026-106490 | BA backstage backstage | 6.5 | Oct 6 | Backstage: Improper input validation in TechDocs static content requests |
| CVE-2026-106489 | PL plugin-techdocs-backend @backstage | 6.5 | Oct 6 | Backstage: Improper authorization enforcement for TechDocs static content |
| CVE-2026-106488 | BA backstage backstage | 8.1 | Oct 6 | Backstage: Improper authentication in the OIDC provider |
| CVE-2026-106487 | BA backstage backstage | 5.0 | Oct 6 | Backstage: Unsupported catalog cluster authentication mode in kubernetes backend |
| CVE-2026-106486 | PL plugin-scaffolder-backend-module-bitbucket-server @backstage | 9.9 | Oct 6 | Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions |
| CVE-2026-106463 | BA backstage backstage | 5.4 | Oct 6 | Backstage: Improper authorization in GitLab organizational user ingestion |
| CVE-2026-106462 | PL plugin-scaffolder-backend-module-gitlab @backstage | 6.4 | Oct 6 | Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback |
| CVE-2026-106461 | BA backstage backstage | 4.3 | Oct 6 | Backstage: Incorrect authorization in scaffolder task listing |
| CVE-2026-106460 | PL plugin-auth-node @backstage | 6.8 | Oct 6 | Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization |
| CVE-2026-106459 | PL plugin-scaffolder-backend-module-sentry @backstage | 8.5 | Oct 6 | Backstage: Improper input validation in Sentry scaffolder actions |
| CVE-2026-106458 | PL plugin-catalog-backend-module-bitbucket-server @backstage | 6.5 | Oct 6 | Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates |
| CVE-2026-106457 | BA backstage backstage | 8.1 | Oct 6 | Backstage: Insufficient audience validation in the Cloudflare Access auth provider |
| CVE-2026-106456 | PL plugin-proxy-backend @backstage | 6.5 | Oct 6 | Backstage: Inconsistent credential enforcement for overlapping proxy routes |
| CVE-2026-106455 | BA backstage backstage | 7.7 | Oct 6 | Backstage: Improper validation of MkDocs plugin configuration in TechDocs |
| CVE-2026-88064 | BA backstage backstage | 8.8 | Sep 16 | Backstage: Improper input validation in TechDocs MkDocs configuration |
| CVE-2026-73563 | BA backstage backstage | 6.1 | Aug 13 | Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend` |
| CVE-2026-44374 | PL plugin-catalog-unprocessed-entities-common @backstage | 4.3 | May 14 | Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks |
| CVE-2026-32237 | PL plugin-scaffolder-backend @backstage | 6.5 | Mar 12 | @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint |
| CVE-2026-32236 | PL plugin-auth-backend @backstage | 7.5 | Mar 12 | @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch |
| CVE-2026-32235 | PL plugin-auth-backend @backstage | 4.7 | Mar 12 | @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass |
| CVE-2026-29186 | BA backstage backstage | 9.8 | Mar 7 | @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution |
| CVE-2026-29184 | BA backstage backstage | 6.5 | Mar 7 | @backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass |
| CVE-2026-29185 | BA backstage backstage | 2.7 | Mar 7 | @backstage/integration: Potential reading of SCM URLs using built in token |
| CVE-2026-25152 | BA backstage backstage | 6.5 | Jan 30 | @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator |
| CVE-2026-25153 | BA backstage backstage | 8.8 | Jan 30 | @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks |
| CVE-2026-24048 | BA backstage backstage | 3.7 | Jan 21 | Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow` |
| CVE-2026-24047 | BA backstage backstage | 6.3 | Jan 21 | @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass |
| CVE-2026-24046 | BA backstage backstage | 7.1 | Jan 21 | Backstage has a Possible Symlink Path Traversal in Scaffolder Actions |
| CVE-2025-55285 | BA backstage backstage | 2.6 | Aug 15 | @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template` |
| CVE-2025-32791 | BA backstage backstage | 4.3 | Apr 16 | Permission policy information leakage in Backstage permission system |
| CVE-2024-53983 | BA backstage backstage | 5.4 | Nov 29 | Server-side request forgery in Backstage Scaffolder plugin |