CVE-2026-29185

A flaw was found in the Backstage SCM Source Code Management integration component. This vulnerability allows an attacker to include encoded path traversal sequences within SCM URLs. When these URLs are processed, the traversal segments can redirect requests to unintended SCM provider API...