281 matches found
CVE-2026-106506
A flaw was found in plugin-scaffolder-backend. This vulnerability allows an authenticated user with permission to create and view tasks to access confidential task secrets, resulting in information disclosure. Due to improper input validation in task list ordering, an attacker can submit repeated...
EUVD-2026-93993
Backstage: Improper input validation in Sentry scaffolder actions...
Backstage: Improper input validation in Sentry scaffolder actions
Impact An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials. Subsequent impact depends on network reachability and the privileges granted to the configured token. Patches Upgrade...
GHSA-G734-FHP4-7MFP Backstage: Improper input validation in Sentry scaffolder actions
Impact An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials. Subsequent impact depends on network reachability and the privileges granted to the configured token. Patches Upgrade...
GHSA-75QF-886X-5XF2 Backstage: Improper input validation in Confluence to Markdown scaffolder module
Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...
Backstage: Improper input validation in Confluence to Markdown scaffolder module
Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...
Backstage: Improper repository path validation in a Scaffolder backend module
Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...
GHSA-2CMG-V53W-8XFP Backstage: Improper repository path validation in a Scaffolder backend module
Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback
Impact Scaffolder actions that interact with source control systems may not consistently enforce the intended credential boundaries under certain configurations. An authenticated user could perform operations with broader access than intended. Patches - @backstage/plugin-scaffolder-backend versio...
EUVD-2026-93999
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback...
GHSA-29GX-H2M3-XW44 Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback
Impact Scaffolder actions that interact with source control systems may not consistently enforce the intended credential boundaries under certain configurations. An authenticated user could perform operations with broader access than intended. Patches - @backstage/plugin-scaffolder-backend versio...
GHSA-G8RX-F7M5-7794 Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions
Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...
Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions
Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...
EUVD-2026-94003
Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...
EUVD-2026-94059
Backstage: Sensitive information exposure in Scaffolder...
GHSA-G2V8-7JHW-PP8P Backstage: Sensitive information exposure in Scaffolder
Impact An authenticated Backstage user who can read another user's Scaffolder task may receive internal execution data. In deployments where that data contains credentials for an external service, this may permit disclosure and unauthorized changes in that external service. Patches Patched in...
Backstage: Sensitive information exposure in Scaffolder
Impact An authenticated Backstage user who can read another user's Scaffolder task may receive internal execution data. In deployments where that data contains credentials for an external service, this may permit disclosure and unauthorized changes in that external service. Patches Patched in...
EUVD-2026-94057
Backstage: Secret-derived values may be exposed in scaffolder task logs...
Backstage: Secret-derived values may be exposed in scaffolder task logs
Impact Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or modify Scaffolder templates are affected. A template author could cause secret-derived values used during template iteration to be persisted in task logs, exposing those values to...
GHSA-MFVQ-X7VR-RGQG Backstage: Secret-derived values may be exposed in scaffolder task logs
Impact Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or modify Scaffolder templates are affected. A template author could cause secret-derived values used during template iteration to be persisted in task logs, exposing those values to...