BA
Product
Backstage/plugin-auth-backend
by Linuxfoundation · last CVE Aug 13, 2026
1
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Backstage/plugin-auth-backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73563
6.1
0%
Aug 13
Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`
Affected: before 0.29.2
Showing 1