Backstage
Backstage Plugin Scaffolder Backend: vulnerabilidades y CVE
Backstage Plugin Scaffolder Backend tiene 5 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses5
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-106503 | Alta (8.1) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An… |
| CVE-2026-106501 | Crítica (9.6) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in scaffolder. An… |
| CVE-2026-106500 | Alta (8.5) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper task state validation in scaffolder… |
| CVE-2026-106499 | Media (4.9) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived values in Scaffolder task logs. Deployments that configure… |
| CVE-2026-106461 | Media (4.3) | — | — | 6 oct 2026 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect authorization in scaffolder task listing. An authenticated… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Backstage
Plugin Techdocs Node · 5Plugin-scaffolder-backend · 5Plugin Catalog Backend · 3Backend Defaults · 2Plugin-scaffolder-node · 2Plugin Techdocs Backend · 2Plugin-auth-backend · 1Plugin-app-backend · 1Plugin-proxy-backend · 1Plugin-auth-node · 1Permissions · 1Plugin-auth-backend-module-oidc-provider · 1