Vulnerabilities

Summary — last 7 days

New vulnerabilities4,629▼ 493 vs. last week
Critical / high1,826▼ 1,072 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)880▲ 782 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
AnalyzedMedium (6.4)0.17%—Linuxfoundation Backstage/plugin-scaffolder-backendLinuxfoundation Backstage/plugin-scaffolder-backend-module-azureLinuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-cloudLinuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-server+310/6/202610/22/2026
Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operations with more access…