Backstage
Backstage Plugin Catalog Backend: vulnerabilidades y CVE
Backstage Plugin Catalog Backend tiene 3 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE3
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-106498 | Alta (7.7) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is affected by improper url validation in catalog entity… |
| CVE-2026-106497 | Media (4.3) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent catalog property permission evaluation. In deployments that use… |
| CVE-2026-106496 | Baja (3.1) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent enforcement of allowed location types during catalog processing.… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Backstage
Plugin Techdocs Node · 5Plugin-scaffolder-backend · 5Plugin Scaffolder Backend · 5Backend Defaults · 2Plugin-scaffolder-node · 2Plugin Techdocs Backend · 2Plugin-auth-backend · 1Plugin-app-backend · 1Plugin-proxy-backend · 1Plugin-auth-node · 1Permissions · 1Plugin-auth-backend-module-oidc-provider · 1