Plugin-scaffolder-backend (Backstage) - vulnerabilities (CVEs)
10 CVEs, 9 in the last 30 days, 2 known versions, newest CVE from 2026-10-06. Vendor: Backstage.
CVEs of Plugin-scaffolder-backend
- CVE-2026-106506 - CVSS 5.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input…
- CVE-2026-106504 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive…
- CVE-2026-106503 - CVSS 8.1 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106502 - CVSS 5.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive…
- CVE-2026-106501 - CVSS 9.6 (critical), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106500 - CVSS 8.5 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106499 - CVSS 4.9 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived…
- CVE-2026-106462 - CVSS 6.4 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended…
- CVE-2026-106461 - CVSS 4.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect…
- CVE-2026-32237 - CVSS 6.5 (medium), 2026-03-12: Backstage is an open framework for building developer portals. Prior to 3.1.5, authenticated users with permission to execute scaffolder dry-runs can gain…
