BD
Product
Backstage/backend Defaults
4
CVEs
0
On KEV
6.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 0Medium 3Low 1
Watch
Add Backstage/backend Defaults to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106492 | 6.5 | Oct 6 | Backstage: Improper preservation of access restrictions during service credential delegation Affected: before 0.16.1; 0.17.0 before 0.17.8 |
| CVE-2026-106494 | 4.9 | Oct 6 | Backstage: Improper input validation in cloud storage URL readers Affected: before 0.17.8 |
| CVE-2026-106493 | 4.1 | Oct 6 | Backstage: Cloud storage catalog locations may cross configured storage boundaries Affected: before 0.17.8 |
| CVE-2026-24048 | 3.7 | Jan 21 | Backstage is an open framework for building developer portals, and @backstage/backend-defaults provides the default implementations and setup for a standard Backstage backend app Affected: before 0.12.2; 0.13.0 through 0.13.2; 0.14.0 through 0.14.1 |
Showing 4