CVE-2026-106458

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

CVE-2026-106458

The Backstage framework affects the @backstage/plugin-catalog-backend-module-bitbucket-server package in versions 0.4.0 through 0.5.15 . The vulnerability stems from inconsistent repository filtering during Bitbucket Server catalog event updates. Specifically, deployments using event-driven updat...