BA
Product
Backstage
53
CVEs
0
On KEV
9.9
Max CVSS
40
New 30D
Severity mix
Critical 3High 16Medium 34Low 0
Watch
Add Backstage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106486 | 9.9 | Oct 6 | Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions Affected: before 1.54.6 |
| CVE-2023-35926 | 9.9 | Jun 22 | Backstage is an open platform for building developer portals Affected: before 1.15.0 |
| CVE-2026-106501 | 9.6 | Oct 6 | Backstage: Sensitive information exposure in Scaffolder Affected: before 1.49.6; 1.50.0 before 1.50.5; 1.51.0 before 1.54.6 |
| CVE-2026-106558 | 8.8 | Oct 7 | Backstage: Improper validation of TechDocs MkDocs configuration Affected: before 1.50.7; 1.51.1 before 1.54.8; 1.55.1 before 1.55.2; 1.51.0; 1.51.0; 1.51.0; +6 more |
| CVE-2026-106509 | 8.8 | Oct 6 | Backstage: Improper validation of MkDocs theme configuration in TechDocs Affected: before 1.50.5; 1.51.1 before 1.54.6; 1.51.0; 1.51.0; 1.51.0; 1.51.0; +1 more |
| CVE-2026-88064 | 8.8 | Sep 16 | Backstage: Improper input validation in TechDocs MkDocs configuration Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-25153 | 8.8 | Jan 30 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs Affected: before 1.13.11; 1.14.0 before 1.14.1 |
| CVE-2026-106505 | 8.5 | Oct 6 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend Affected: before 1.50.5; 1.51.1 before 1.54.6; 1.51.0; 1.51.0; 1.51.0; 1.51.0; +1 more |
| CVE-2026-106500 | 8.5 | Oct 6 | Backstage: Improper task state validation in Scaffolder backend Affected: before 1.49.6; 1.50.0 before 1.50.5; 1.51.0 before 1.54.6 |
| CVE-2026-106459 | 8.5 | Oct 6 | Backstage: Improper input validation in Sentry scaffolder actions Affected: 1.47.0 before 1.54.8 |
| CVE-2021-43783 | 8.5 | Nov 29 | @backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates Affected: before 0.15.14 |
| CVE-2026-106503 | 8.1 | Oct 6 | Backstage: Scaffolder action input authorization bypass Affected: before 1.49.6; 1.50.0 before 1.50.5; 1.51.0 before 1.54.6 |
| CVE-2026-106488 | 8.1 | Oct 6 | Backstage: Improper authentication in the OIDC provider Affected: before 1.54.6 |
| CVE-2026-106457 | 8.1 | Oct 6 | Backstage: Insufficient audience validation in the Cloudflare Access auth provider Affected: 1.26.0 before 1.55.0 |
| CVE-2026-106556 | 7.7 | Oct 7 | Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization Affected: before 1.50.5; 1.51.1 before 1.54.6; 1.51.0; 1.51.0; 1.51.0; 1.51.0; +1 more |
| CVE-2026-106510 | 7.7 | Oct 7 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml Affected: before 1.50.5; 1.51.1 before 1.54.6; 1.51.0; 1.51.0; 1.51.0; 1.51.0; +1 more |
| CVE-2026-106498 | 7.7 | Oct 6 | Backstage: Improper URL validation in catalog entity placeholder resolution Affected: before 1.49.6; 1.50.0 before 1.50.5; 1.51.0 before 1.51.3; 1.52.0 before 1.53.2; 1.54.0 before 1.54.6 |
| CVE-2026-106455 | 7.7 | Oct 6 | Backstage: Improper validation of MkDocs plugin configuration in TechDocs Affected: 0.71.1 before 1.50.6; 1.51.1 before 1.54.8; 1.51.0; 1.51.0; 1.51.0; 1.51.0; +1 more |
| CVE-2026-32236 | 7.5 | Mar 12 | Backstage is an open framework for building developer portals Affected: through 0.27.0 |
| CVE-2026-106460 | 6.8 | Oct 6 | Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization Affected: 0.4.0 before 0.5.15 |
| CVE-2026-106563 | 6.5 | Oct 7 | Backstage: Improper entity validation in deprecated Kubernetes services endpoint Affected: before 1.54.1 |
| CVE-2026-106560 | 6.5 | Oct 7 | Backstage: Improper repository path validation in a Scaffolder backend module Affected: before 1.54.6 |
| CVE-2026-106559 | 6.5 | Oct 7 | Backstage: Improper input validation in Confluence to Markdown scaffolder module Affected: before 1.54.6 |
| CVE-2026-106508 | 6.5 | Oct 6 | Backstage: Potential file exposure through local TechDocs publisher Affected: before 1.54.6 |
| CVE-2026-106507 | 6.5 | Oct 6 | Backstage: TechDocs arbitrary file read via mkdocs snippets Affected: before 1.54.6 |
| CVE-2026-106504 | 6.5 | Oct 6 | Backstage: Sensitive information exposure in scaffolder task logs Affected: before 1.54.6 |
| CVE-2026-106496 | 6.5 | Oct 6 | Backstage: Inconsistent enforcement of allowed location types during catalog processing Affected: before 1.54.6 |
| CVE-2026-106492 | 6.5 | Oct 6 | Backstage: Improper preservation of access restrictions during service credential delegation Affected: before 1.49.6; 1.50.0 before 1.54.6 |
| CVE-2026-106490 | 6.5 | Oct 6 | Backstage: Improper input validation in TechDocs static content requests Affected: before 1.54.6 |
| CVE-2026-106489 | 6.5 | Oct 6 | Backstage: Improper authorization enforcement for TechDocs static content Affected: before 1.54.6 |
| CVE-2026-106458 | 6.5 | Oct 6 | Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates Affected: 1.38.0 before 1.55.0 |
| CVE-2026-106456 | 6.5 | Oct 6 | Backstage: Inconsistent credential enforcement for overlapping proxy routes Affected: 1.28.0 before 1.55.0 |
| CVE-2026-25152 | 6.5 | Jan 30 | Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs Affected: before 1.13.11; 1.14.0 before 1.14.1 |
| CVE-2024-45816 | 6.5 | Sep 17 | Backstage is an open framework for building developer portals Affected: before 1.10.13 |
| CVE-2024-45815 | 6.5 | Sep 17 | Backstage is an open framework for building developer portals Affected: before 1.26.0 |
| CVE-2021-32662 | 6.5 | Jun 3 | Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs Affected: before 0.6.3 |
| CVE-2026-106491 | 6.4 | Oct 6 | Backstage: Improper input validation in proxy-backend Affected: before 1.54.6 |
| CVE-2026-106462 | 6.4 | Oct 6 | Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback Affected: before 1.54.6 |
| CVE-2023-6944 | 5.7 | Jan 4 | A flaw was found in the Red Hat Developer Hub (RHDH) Affected: before 1.21.0 |
| CVE-2026-106463 | 5.4 | Oct 6 | Backstage: Improper authorization in GitLab organizational user ingestion Affected: before 1.54.6 |
| CVE-2024-46976 | 5.4 | Sep 17 | Backstage is an open framework for building developer portals Affected: before 1.10.13 |
| CVE-2026-106506 | 5.3 | Oct 6 | Backstage: Improper input validation in scaffolder task list ordering Affected: before 1.54.6 |
| CVE-2026-106502 | 5.3 | Oct 6 | Backstage: Sensitive information may be exposed in Scaffolder task failure events Affected: before 1.54.6 |
| CVE-2026-106561 | 5.0 | Oct 7 | Backstage: Sensitive information disclosure in Kubernetes resource queries Affected: before 1.54.2 |
| CVE-2026-106487 | 5.0 | Oct 6 | Backstage: Unsupported catalog cluster authentication mode in kubernetes backend Affected: before 1.54.6 |
| CVE-2026-106499 | 4.9 | Oct 6 | Backstage: Secret-derived values may be exposed in scaffolder task logs Affected: before 1.54.6 |
| CVE-2026-106494 | 4.9 | Oct 6 | Backstage: Improper input validation in cloud storage URL readers Affected: before 1.54.6 |
| CVE-2021-41151 | 4.9 | Oct 18 | Backstage is an open platform for building developer portals Affected: 0.9.4 before 0.15.9 |
| CVE-2026-32235 | 4.7 | Mar 12 | Backstage is an open framework for building developer portals Affected: through 0.27.0 |
| CVE-2026-106562 | 4.3 | Oct 7 | Backstage: Incorrect authorization in search engine permission filtering Affected: before 1.54.1 |