EUVD-2026-94060

Backstage may expose sensitive information in Scaffolder task failure events...

CVE-2026-106502

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

CVE-2026-106502 Backstage: Sensitive information may be exposed in Scaffolder task failure events

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

CVE-2026-106502

The Backstage framework, specifically the @backstage/plugin-scaffolder-backend package in versions prior to 4.1.0 , contains a vulnerability where sensitive information may be exposed in Scaffolder task failure events . Under specific template and failure conditions, an authenticated user could r...

CVE-2026-106502 Backstage: Sensitive information may be exposed in Scaffolder task failure events

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder task failure events. Under specific template and failure conditions, an authenticated user may retrieve backend-managed...

PT-2026-107299

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package may expose sensitive information within Scaffolder task failure events. An authenticated user can retrieve backend-managed credentials used during...