« Back to list

Linuxfoundation

Linuxfoundation Backstage/plugin-scaffolder-backend-module-confluence-to-markdown: vulnerabilities and CVEs

Linuxfoundation Backstage/plugin-scaffolder-backend-module-confluence-to-markdown has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-106560Medium (6.5)0.31%—Oct 7, 2026
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a…
CVE-2026-106559Medium (6.5)0.33%—Oct 7, 2026
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1203 Exploitation for Client Execution1
  2. T1210 Exploitation of Remote Services1
  3. T1565.001 Stored Data Manipulation1
  4. T1565.002 Transmitted Data Manipulation1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Linuxfoundation