Login Request a demo
LI
Vendor
Linuxfoundation
133 products with CVEs on record
672
CVEs
0
On KEV
90
New 30D
Products
BA
Backstage
Linuxfoundation
9.9
53 CVEs0 on KEV40 new
BA
Backstage/plugin-scaffolder-backend
Linuxfoundation
9.6
11 CVEs0 on KEV9 new
BP
Backstage Plugin-techdocs-node
Linuxfoundation
9.8
10 CVEs0 on KEV8 new
BA
Backstage/plugin-scaffolder-backend-module-bitbucket-cloud
Linuxfoundation
9.9
2 CVEs0 on KEV2 new
BA
Backstage/plugin-scaffolder-backend-module-bitbucket-server
Linuxfoundation
9.9
2 CVEs0 on KEV2 new
VI
Vitess
Linuxfoundation
9.9
5 CVEs0 on KEV1 new
BD
Backstage/backend Defaults
Linuxfoundation
6.5
4 CVEs0 on KEV3 new
BP
Backstage Plugin-catalog-backend
Linuxfoundation
7.7
4 CVEs0 on KEV3 new
BA
Backstage/plugin-kubernetes-backend
Linuxfoundation
6.5
3 CVEs0 on KEV3 new
BA
Backstage/plugin-proxy-backend
Linuxfoundation
6.5
2 CVEs0 on KEV2 new
BA
Backstage/plugin-scaffolder-backend-module-confluence-to-markdown
Linuxfoundation
6.5
2 CVEs0 on KEV2 new
BA
Backstage/plugin-techdocs-backend
Linuxfoundation
6.5
2 CVEs0 on KEV2 new
BA
Backstage/plugin-auth-backend-module-cloudflare-access-provider
Linuxfoundation
8.1
1 CVEs0 on KEV1 new
BA
Backstage/plugin-auth-backend-module-oidc-provider
Linuxfoundation
8.1
1 CVEs0 on KEV1 new
BA
Backstage/plugin-auth-node
Linuxfoundation
6.8
1 CVEs0 on KEV1 new
BA
Backstage/plugin-catalog-backend-module-aws
Linuxfoundation
4.1
1 CVEs0 on KEV1 new
BA
Backstage/plugin-catalog-backend-module-azure
Linuxfoundation
4.1
1 CVEs0 on KEV1 new
BA
Backstage/plugin-catalog-backend-module-bitbucket-server
Linuxfoundation
6.5
1 CVEs0 on KEV1 new
BA
Backstage/plugin-catalog-backend-module-gitlab
Linuxfoundation
5.4
1 CVEs0 on KEV1 new
BA
Backstage/plugin-scaffolder-backend-module-azure
Linuxfoundation
6.4
1 CVEs0 on KEV1 new
BA
Backstage/plugin-scaffolder-backend-module-github
Linuxfoundation
6.4
1 CVEs0 on KEV1 new
BA
Backstage/plugin-scaffolder-backend-module-gitlab
Linuxfoundation
6.4
1 CVEs0 on KEV1 new
BA
Backstage/plugin-scaffolder-backend-module-sentry
Linuxfoundation
8.5
1 CVEs0 on KEV1 new
BA
Backstage/plugin-search-backend
Linuxfoundation
4.3
1 CVEs0 on KEV1 new
BA
Backstage/plugin-search-backend-module-elasticsearch
Linuxfoundation
4.3
1 CVEs0 on KEV1 new
YO
Yocto
Linuxfoundation
9.8
114 CVEs0 on KEV0 new
NA
Nats-server
Linuxfoundation
9.8
36 CVEs0 on KEV0 new
PY
Pytorch
Linuxfoundation
9.8
31 CVEs0 on KEV0 new
EV
Everest
Linuxfoundation
9.1
29 CVEs0 on KEV0 new
HA
Harbor
Linuxfoundation
9.4
24 CVEs0 on KEV0 new
CO
Containerd
Linuxfoundation
9.9
22 CVEs0 on KEV0 new
MA
Magma
Linuxfoundation
9.8
22 CVEs0 on KEV0 new
RU
Runc
Linuxfoundation
8.6
17 CVEs0 on KEV0 new
IO
Iot-yocto
Linuxfoundation
6.7
15 CVEs0 on KEV0 new
CU
Cups-filters
Linuxfoundation
8.8
14 CVEs0 on KEV0 new
DR
Dragonfly
Linuxfoundation
9.8
13 CVEs0 on KEV0 new
ON
Onnx
Linuxfoundation
9.1
12 CVEs0 on KEV0 new
ON
Open Network Operating System
Linuxfoundation
9.8
11 CVEs0 on KEV0 new
SP
Spinnaker
Linuxfoundation
9.9
10 CVEs0 on KEV0 new
CE
Ceph
Linuxfoundation
9.1
8 CVEs0 on KEV0 new
KU
Kubeedge
Linuxfoundation
7.5
8 CVEs0 on KEV0 new
TP
Tekton Pipelines
Linuxfoundation
9.6
8 CVEs0 on KEV0 new
CU
Cubefs
Linuxfoundation
9.8
6 CVEs0 on KEV0 new
AG
Automotive Grade Linux
Linuxfoundation
9.8
5 CVEs0 on KEV0 new
EV
Edge Virtualization Engine
Linuxfoundation
9.9
5 CVEs0 on KEV0 new
FO
Foomatic-filters
Linuxfoundation
9.8
5 CVEs0 on KEV0 new
OS
Osquery
Linuxfoundation
9.1
5 CVEs0 on KEV0 new
DE
Dex
Linuxfoundation
9.8
4 CVEs0 on KEV0 new
GS
Grpc Swift
Linuxfoundation
7.5
4 CVEs0 on KEV0 new
IN
Indy-node
Linuxfoundation
8.8
4 CVEs0 on KEV0 new
MA
Materialx
Linuxfoundation
7.5
4 CVEs0 on KEV0 new
OP
Opendaylight
Linuxfoundation
7.5
4 CVEs0 on KEV0 new
OI
Opentelemetry Instrumentation For Java
Linuxfoundation
9.8
4 CVEs0 on KEV0 new
RE
Rekor
Linuxfoundation
7.5
4 CVEs0 on KEV0 new
TU
The Update Framework
Linuxfoundation
9.8
4 CVEs0 on KEV0 new
AR
Argo-cd
Linuxfoundation
9.6
3 CVEs0 on KEV0 new
BE
Besu
Linuxfoundation
9.1
3 CVEs0 on KEV0 new
CO
Cortex
Linuxfoundation
6.5
3 CVEs0 on KEV0 new
IG
Inspektor Gadget
Linuxfoundation
9.8
3 CVEs0 on KEV0 new
KE
Kedro
Linuxfoundation
9.8
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104252
VI
Vitess
Linuxfoundation
9.8
1%
Oct 13Vitess vttablet /twopcz reflected XSS
CVE-2026-106563
BA
Backstage/plugin-kubernetes-backend
Linuxfoundation
6.5
0%
Oct 7Backstage: Improper entity validation in deprecated Kubernetes services endpoint
CVE-2026-106562
BA
Backstage/plugin-search-backend-module-elasticsearch
Linuxfoundation
4.3
0%
Oct 7Backstage: Incorrect authorization in search engine permission filtering
CVE-2026-106561
BA
Backstage
Linuxfoundation
5.0
0%
Oct 7Backstage: Sensitive information disclosure in Kubernetes resource queries
CVE-2026-106560
BA
Backstage
Linuxfoundation
6.5
0%
Oct 7Backstage: Improper repository path validation in a Scaffolder backend module
CVE-2026-106559
BA
Backstage/plugin-scaffolder-backend-module-confluence-to-markdown
Linuxfoundation
6.5
0%
Oct 7Backstage: Improper input validation in Confluence to Markdown scaffolder module
CVE-2026-106558
BA
Backstage
Linuxfoundation
8.8
0%
Oct 7Backstage: Improper validation of TechDocs MkDocs configuration
CVE-2026-106556
BP
Backstage Plugin-techdocs-node
Linuxfoundation
7.7
0%
Oct 7Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
CVE-2026-106510
BP
Backstage Plugin-techdocs-node
Linuxfoundation
7.7
0%
Oct 7Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
CVE-2026-106509
BP
Backstage Plugin-techdocs-node
Linuxfoundation
8.8
1%
Oct 6Backstage: Improper validation of MkDocs theme configuration in TechDocs
CVE-2026-106508
BP
Backstage Plugin-techdocs-node
Linuxfoundation
6.5
0%
Oct 6Backstage: Potential file exposure through local TechDocs publisher
CVE-2026-106507
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: TechDocs arbitrary file read via mkdocs snippets
CVE-2026-106506
BA
Backstage/plugin-scaffolder-backend
Linuxfoundation
5.3
0%
Oct 6Backstage: Improper input validation in scaffolder task list ordering
CVE-2026-106505
BP
Backstage Plugin-techdocs-node
Linuxfoundation
8.5
0%
Oct 6Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
CVE-2026-106504
BA
Backstage/plugin-scaffolder-backend
Linuxfoundation
6.5
0%
Oct 6Backstage: Sensitive information exposure in scaffolder task logs
CVE-2026-106503
BA
Backstage/plugin-scaffolder-backend
Linuxfoundation
8.1
0%
Oct 6Backstage: Scaffolder action input authorization bypass
CVE-2026-106502
BA
Backstage
Linuxfoundation
5.3
0%
Oct 6Backstage: Sensitive information may be exposed in Scaffolder task failure events
CVE-2026-106501
BA
Backstage/plugin-scaffolder-backend
Linuxfoundation
9.6
0%
Oct 6Backstage: Sensitive information exposure in Scaffolder
CVE-2026-106500
BA
Backstage
Linuxfoundation
8.5
0%
Oct 6Backstage: Improper task state validation in Scaffolder backend
CVE-2026-106499
BA
Backstage
Linuxfoundation
4.9
0%
Oct 6Backstage: Secret-derived values may be exposed in scaffolder task logs
CVE-2026-106498
BP
Backstage Plugin-catalog-backend
Linuxfoundation
7.7
0%
Oct 6Backstage: Improper URL validation in catalog entity placeholder resolution
CVE-2026-106497
BP
Backstage Plugin-catalog-backend
Linuxfoundation
4.3
0%
Oct 6Backstage: Inconsistent catalog property permission evaluation
CVE-2026-106496
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: Inconsistent enforcement of allowed location types during catalog processing
CVE-2026-106494
BD
Backstage/backend Defaults
Linuxfoundation
4.9
0%
Oct 6Backstage: Improper input validation in cloud storage URL readers
CVE-2026-106493
BA
Backstage/backend-defaults
Linuxfoundation
4.1
0%
Oct 6Backstage: Cloud storage catalog locations may cross configured storage boundaries
CVE-2026-106492
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: Improper preservation of access restrictions during service credential delegation
CVE-2026-106491
BA
Backstage/plugin-proxy-backend
Linuxfoundation
6.4
0%
Oct 6Backstage: Improper input validation in proxy-backend
CVE-2026-106490
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: Improper input validation in TechDocs static content requests
CVE-2026-106489
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: Improper authorization enforcement for TechDocs static content
CVE-2026-106488
BA
Backstage
Linuxfoundation
8.1
0%
Oct 6Backstage: Improper authentication in the OIDC provider
CVE-2026-106487
BA
Backstage
Linuxfoundation
5.0
0%
Oct 6Backstage: Unsupported catalog cluster authentication mode in kubernetes backend
CVE-2026-106486
BA
Backstage/plugin-scaffolder-backend-module-bitbucket-cloud
Linuxfoundation
9.9
0%
Oct 6Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions
CVE-2026-106463
BA
Backstage
Linuxfoundation
5.4
0%
Oct 6Backstage: Improper authorization in GitLab organizational user ingestion
CVE-2026-106462
BA
Backstage/plugin-scaffolder-backend-module-gitlab
Linuxfoundation
6.4
0%
Oct 6Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback
CVE-2026-106461
BA
Backstage
Linuxfoundation
4.3
0%
Oct 6Backstage: Incorrect authorization in scaffolder task listing
CVE-2026-106460
BA
Backstage
Linuxfoundation
6.8
0%
Oct 6Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization
CVE-2026-106459
BA
Backstage/plugin-scaffolder-backend-module-sentry
Linuxfoundation
8.5
0%
Oct 6Backstage: Improper input validation in Sentry scaffolder actions
CVE-2026-106458
BA
Backstage/plugin-catalog-backend-module-bitbucket-server
Linuxfoundation
6.5
0%
Oct 6Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
CVE-2026-106457
BA
Backstage
Linuxfoundation
8.1
0%
Oct 6Backstage: Insufficient audience validation in the Cloudflare Access auth provider
CVE-2026-106456
BA
Backstage
Linuxfoundation
6.5
0%
Oct 6Backstage: Inconsistent credential enforcement for overlapping proxy routes
CVE-2026-106455
BP
Backstage Plugin-techdocs-node
Linuxfoundation
7.7
0%
Oct 6Backstage: Improper validation of MkDocs plugin configuration in TechDocs
CVE-2026-88064
BP
Backstage Plugin-techdocs-node
Linuxfoundation
8.8
1%
Sep 16Backstage: Improper input validation in TechDocs MkDocs configuration
CVE-2026-49114
ON
Onnx
Linuxfoundation
7.1
0%
Aug 21ONNX symlink-following and path-traversal arbitrary file write
CVE-2026-73563
BA
Backstage/plugin-auth-backend
Linuxfoundation
6.1
0%
Aug 13Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`
CVE-2026-65918
TO
Torchvision
Linuxfoundation
7.1
0%
Jul 23PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
CVE-2026-50151
OR
Oras
Linuxfoundation
7.5
0%
Jul 17oras-go: credential forwarding via unvalidated Location header in blob upload
CVE-2026-49835
ST
Sigstore Timestamp Authority
Linuxfoundation
7.5
1%
Jul 17Sigstore Timestamp Authority: OOM due to unbounded metric label cardinality
CVE-2026-62290
CE
Cert-manager
Linuxfoundation
7.3
0%
Jul 16cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
CVE-2026-55175
SP
Spinnaker
Linuxfoundation
7.5
1%
Jul 10Spinnaker: Improper yaml processing on kustomize bake operations
CVE-2026-44795
SP
Spinnaker
Linuxfoundation
8.8
1%
Jul 10Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types
CVE-2026-58208
NA
Nats-server
Linuxfoundation
7.5
1%
Jul 8NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
CVE-2026-58211
NA
Nats-server
Linuxfoundation
5.4
0%
Jul 8NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions
CVE-2026-58207
NA
Nats-server
Linuxfoundation
6.5
1%
Jul 8NATS Server: Remote crash via integer overflow in Connz pagination
CVE-2026-58210
NA
Nats-server
Linuxfoundation
7.5
1%
Jul 8NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory
CVE-2026-58209
NA
Nats-server
Linuxfoundation
4.3
0%
Jul 8NATS Server: MQTT retained and QoS replay bypass subscribe deny filters
CVE-2026-58214
NA
Nats-server
Linuxfoundation
4.3
0%
Jul 8NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)
CVE-2026-58254
NA
Nats-server
Linuxfoundation
6.5
0%
Jul 8NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check
CVE-2026-58213
NA
Nats-server
Linuxfoundation
7.1
0%
Jul 8NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
CVE-2026-58250
NA
Nats-server
Linuxfoundation
7.5
1%
Jul 8NATS Server: Pre-auth server crash via double INFO in leafnode handshake
CVE-2026-58252
NA
Nats-server
Linuxfoundation
6.5
0%
Jul 8NATS Server: Subscribe Authz Bypass via Wildcard-Overlap