CVE-2026-106502

The Backstage framework, specifically the @backstage/plugin-scaffolder-backend package in versions prior to 4.1.0 , contains a vulnerability where sensitive information may be exposed in Scaffolder task failure events . Under specific template and failure conditions, an authenticated user could r...