Vulnerabilities
Summary — last 7 days
New vulnerabilities4,629▼ 493 vs. last week
Critical / high1,826▼ 1,072 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)880▲ 782 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Critical (9.9) | 0.37% | — | Linuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-cloudLinuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-serverLinuxfoundation Backstage | 10/6/2026 | 10/23/2026 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate filesystem paths. An… | |
| Analyzed | Medium (6.4) | 0.17% | — | Linuxfoundation Backstage/plugin-scaffolder-backendLinuxfoundation Backstage/plugin-scaffolder-backend-module-azureLinuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-cloudLinuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-server+3 | 10/6/2026 | 10/22/2026 | Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operations with more access… |