Vulnerabilities
Summary — last 7 days
New vulnerabilities5,112▲ 1,960 vs. last week
Critical / high2,827▲ 1,289 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)197▼ 10 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Medium (4.3) | 0.20% | — | Linuxfoundation Backstage/plugin-search-backendLinuxfoundation Backstage/plugin-search-backend-module-elasticsearchLinuxfoundation Backstage | 10/7/2026 | 10/16/2026 | Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject to a DENY policy for… |