Vulnerabilities in @backstage
45 resultsCVE-2026-106461MEDIUMBackstage: Incorrect authorization in scaffolder task listingEPSS 0.2%CVE-2026-106463MEDIUMBackstage: Improper authorization in GitLab organizational user ingestionEPSS 0.2%CVE-2026-106462MEDIUMBackstage: Scaffolder credential handling may allow unintended GitHub authentication fallbackEPSS 0.2%CVE-2026-44374MEDIUMBackstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checksEPSS 0.2%CVE-2026-32235MEDIUM@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypassEPSS 0.1%