VendorsLinux Foundationbackstageany version

Vulnerabilities

Linux Foundation Backstage any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

53CVEs

CVE-2023-35926

Insecure sandbox in Backstage Scaffolder plugin

Published 2023-06-22 · Modified

9.9EPSS 0.019

CVE-2026-106486

Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

Published 2026-10-06 · Analyzed

9.9EPSS 0.004

CVE-2026-106501

Backstage: Sensitive information exposure in Scaffolder

Published 2026-10-06 · Analyzed

9.6EPSS 0.005

CVE-2026-88064

Backstage: Improper input validation in TechDocs MkDocs configuration

Published 2026-09-16 · Analyzed

8.8EPSS 0.012

CVE-2026-25153

@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Published 2026-01-30 · Modified

8.8EPSS 0.006

CVE-2026-106509

Backstage: Improper validation of MkDocs theme configuration in TechDocs

Published 2026-10-06 · Analyzed

8.8EPSS 0.005

CVE-2026-106558

Backstage: Improper validation of TechDocs MkDocs configuration

Published 2026-10-07 · Analyzed

8.8EPSS 0.005

CVE-2021-43783

Path Traversal in @backstage/plugin-scaffolder-backend

Published 2021-11-29 · Analyzed

8.5EPSS 0.012

CVE-2026-106500

Backstage: Improper task state validation in Scaffolder backend

Published 2026-10-06 · Analyzed

8.5EPSS 0.003

CVE-2026-106505

Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Published 2026-10-06 · Analyzed

8.5EPSS 0.003

CVE-2026-106459

Backstage: Improper input validation in Sentry scaffolder actions

Published 2026-10-06 · Analyzed

8.5EPSS 0.002

CVE-2026-106503

Backstage: Scaffolder action input authorization bypass

Published 2026-10-06 · Analyzed

8.1EPSS 0.005

CVE-2026-106457

Backstage: Insufficient audience validation in the Cloudflare Access auth provider

Published 2026-10-06 · Analyzed

8.1EPSS 0.004

CVE-2026-106488

Backstage: Improper authentication in the OIDC provider

Published 2026-10-06 · Analyzed

8.1EPSS 0.003

CVE-2026-106510

Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

Published 2026-10-07 · Analyzed

7.7EPSS 0.005

CVE-2026-106455

Backstage: Improper validation of MkDocs plugin configuration in TechDocs

Published 2026-10-06 · Analyzed

7.7EPSS 0.004

CVE-2026-106498

Backstage: Improper URL validation in catalog entity placeholder resolution

Published 2026-10-06 · Analyzed

7.7EPSS 0.003

CVE-2026-106556

Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization

Published 2026-10-07 · Analyzed

7.7EPSS 0.003

CVE-2026-106492

Backstage: Improper preservation of access restrictions during service credential delegation

Published 2026-10-06 · Analyzed

7.6EPSS 0.002

CVE-2026-32236

@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch

Published 2026-03-12 · Modified

7.5EPSS 0.003

CVE-2026-106560

Backstage: Improper repository path validation in a Scaffolder backend module

Published 2026-10-07 · Analyzed

7.1EPSS 0.003

CVE-2021-41151

Path Traversal in @backstage/plugin-scaffolder-backend

Published 2021-10-18 · Modified

6.8EPSS 0.013

CVE-2026-106460

Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization

Published 2026-10-06 · Analyzed

6.8EPSS 0.004

CVE-2021-32662

TechDocs mkdocs.yml path traversal

Published 2021-06-03 · Modified

6.5EPSS 0.013

CVE-2024-45816

Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend

Published 2024-09-17 · Analyzed

6.5EPSS 0.007

CVE-2024-45815

Prototype pollution in @backstage/plugin-catalog-backend

Published 2024-09-17 · Analyzed

6.5EPSS 0.005

CVE-2026-25152

@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Published 2026-01-30 · Analyzed

6.5EPSS 0.004

CVE-2026-106507

Backstage: TechDocs arbitrary file read via mkdocs snippets

Published 2026-10-06 · Analyzed

6.5EPSS 0.004

CVE-2026-106508

Backstage: Potential file exposure through local TechDocs publisher

Published 2026-10-06 · Analyzed

6.5EPSS 0.004

CVE-2026-106490

Backstage: Improper input validation in TechDocs static content requests

Published 2026-10-06 · Analyzed

6.5EPSS 0.004

CVE-2026-106559

Backstage: Improper input validation in Confluence to Markdown scaffolder module

Published 2026-10-07 · Analyzed

6.5EPSS 0.003

CVE-2026-106489

Backstage: Improper authorization enforcement for TechDocs static content

Published 2026-10-06 · Analyzed

6.5EPSS 0.003

CVE-2024-46976

Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend

Published 2024-09-17 · Analyzed

6.5EPSS 0.003

CVE-2026-106458

Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Published 2026-10-06 · Analyzed

6.5EPSS 0.003

CVE-2026-106504

Backstage: Sensitive information exposure in scaffolder task logs

Published 2026-10-06 · Analyzed

6.5EPSS 0.003

CVE-2026-106496

Backstage: Inconsistent enforcement of allowed location types during catalog processing

Published 2026-10-06 · Analyzed

6.5EPSS 0.002

CVE-2026-106456

Backstage: Inconsistent credential enforcement for overlapping proxy routes

Published 2026-10-06 · Analyzed

6.5EPSS 0.002

CVE-2026-106563

Backstage: Improper entity validation in deprecated Kubernetes services endpoint

Published 2026-10-07 · Analyzed

6.5EPSS 0.002

CVE-2026-106491

Backstage: Improper input validation in proxy-backend

Published 2026-10-06 · Analyzed

6.4EPSS 0.003

CVE-2026-106462

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

Published 2026-10-06 · Analyzed

6.4EPSS 0.002

Linux Foundation Backstage any version

Security check