Vulnerabilities in backstage
24 resultsCVE-2026-29184LOW@backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction BypassEPSS 0.3%CVE-2025-32791MEDIUMPermission policy information leakage in Backstage permission systemEPSS 0.2%CVE-2025-55285LOW@backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`EPSS 0.2%CVE-2026-24048LOWBackstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`EPSS 0.2%