EUVD-2026-93990

Backstage: Insufficient audience validation in the Cloudflare Access auth provider...

EUVD-2026-93992

Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates...

EUVD-2026-93993

Backstage: Improper input validation in Sentry scaffolder actions...

EUVD-2026-94000

Backstage has improper authorization in GitLab organizational user ingestion...

EUVD-2026-94003

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...

EUVD-2026-94007

Backstage: Improper authentication in the OIDC provider...

CVE-2026-106562

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

CVE-2026-106559

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-106560

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106562 Backstage: Incorrect authorization in search engine permission filtering

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

EUVD-2026-94375

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

CVE-2026-106562

The Backstage developer portal framework contains an incorrect authorization vulnerability in its search engine permission filtering. Specifically, in versions prior to 2.1.6 of @backstage/plugin-search-backend and 1.8.7 of @backstage/plugin-search-backend-module-elasticsearch, the system could r...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560

The Backstage open framework for developer portals contains an improper repository path validation vulnerability in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package. Specifically, a scaffolder backend module fails to properly validate repository paths, allowing an au...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106559

The Backstage framework is vulnerable in the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package prior to version 0.3.25 . The root cause is improper input validation within the Confluence to Markdown scaffolder module. This flaw allows an attacker to influence file write o...

CVE-2026-106559 Backstage: Improper input validation in Confluence to Markdown scaffolder module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

EUVD-2026-94372

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

CVE-2026-106463

A flaw was found in Backstage's plugin-catalog-backend-module-gitlab. When GitLab organization event ingestion is enabled, improper authorization checks during user ingestion can allow unintended identities to be registered in the catalog. A remote attacker may exploit this flaw to bypass catalog...