261537 matches found
GHSA-826H-28H9-65HG Backstage: Improper authentication in the OIDC provider
Impact Deployments using OIDC email-based identity resolution with a provider that permits unverified email addresses may allow an authenticated provider user to assume another catalog identity. This may grant access and permissions associated with that user. No direct availability impact is...
EUVD-2026-94008
Backstage: Improper authorization enforcement for TechDocs static content...
GHSA-RG9R-HR7G-5GC2 Backstage: Improper authorization enforcement for TechDocs static content
Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...
GHSA-7MFX-XG57-53C9 Backstage: Improper input validation in TechDocs static content requests
Impact When using the Azure Blob Storage provider, an authenticated Backstage user may be able to read restricted TechDocs content when entity-level permissions are enabled. Deployments that intentionally disable the default backend authentication policy may have broader exposure. Patches Patched...
EUVD-2026-94009
Backstage: Improper input validation in TechDocs static content requests...
EUVD-2026-94010
Backstage: Improper input validation in proxy-backend...
Backstage: Improper preservation of access restrictions during service credential delegation
Impact An external service credential configured with access restrictions e.g., read-only could bypass those restrictions by routing requests through plugin delegation paths. This could allow a restricted service to perform operations beyond its intended scope, including write operations on plugi...
EUVD-2026-94052
Backstage: Inconsistent enforcement of allowed location types during catalog processing...
Backstage: Inconsistent enforcement of allowed location types during catalog processing
Impact Under certain configurations, the catalog backend could process location types that were not intended to be allowed, potentially leading to unintended file access on the backend host. Patches Patched in @backstage/plugin-catalog-backend version 3.9.1 Workarounds No practical workarounds ar...
GHSA-PCMQ-25R3-5W9V Backstage: Inconsistent enforcement of allowed location types during catalog processing
Impact Under certain configurations, the catalog backend could process location types that were not intended to be allowed, potentially leading to unintended file access on the backend host. Patches Patched in @backstage/plugin-catalog-backend version 3.9.1 Workarounds No practical workarounds ar...
EUVD-2026-94056
Backstage: Improper URL validation in catalog entity placeholder resolution...
GHSA-QGVJ-QCF8-XQ73 Backstage: Improper URL validation in catalog entity placeholder resolution
Impact An authenticated Backstage user could craft a catalog entity with placeholder directives that reference resources outside the entity's source repository. Under certain configurations, this could allow access to data not intended to be available to the user. Patches Patched in...
EUVD-2026-94059
Backstage: Sensitive information exposure in Scaffolder...
EUVD-2026-94057
Backstage: Secret-derived values may be exposed in scaffolder task logs...
GHSA-MFVQ-X7VR-RGQG Backstage: Secret-derived values may be exposed in scaffolder task logs
Impact Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or modify Scaffolder templates are affected. A template author could cause secret-derived values used during template iteration to be persisted in task logs, exposing those values to...
Backstage: Scaffolder action input authorization bypass
Impact An authenticated user with access to affected Scaffolder templates could bypass configured action restrictions. Depending on integration credentials, this could grant unauthorized access to repositories and related source-control resources. Patches Patched in...
GHSA-HMP2-4M7G-22CV Backstage: Scaffolder action input authorization bypass
Impact An authenticated user with access to affected Scaffolder templates could bypass configured action restrictions. Depending on integration credentials, this could grant unauthorized access to repositories and related source-control resources. Patches Patched in...
EUVD-2026-94068
Backstage: Scaffolder action input authorization bypass...
Backstage: Improper task state validation in Scaffolder backend
Impact An authenticated user with permission to create and access Scaffolder tasks may, under specific timing and deployment conditions, affect files accessible to the Backstage backend. If backend application files are writable, the confidentiality, integrity, and availability of the backend may...