EUVD-2026-93993

Backstage: Improper input validation in Sentry scaffolder actions...

PT-2026-107248

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-sentry versions 0.3.0 through 0.3.7 Description Improper input validation in sentry scaffolder actions allows an authenticated internal user to force the backend to contact unintended destinations...

CVE-2026-106459: Exposure of Sensitive Information to an Unauthorized Actor

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper input validation in sentry scaffolder actions. An authenticated internal user who can execute the affected actions may caus...