Vulnerabilidades en @backstage
45 resultadosCVE-2026-106509HIGHBackstage: Improper validation of MkDocs theme configuration in TechDocsEPSS 0.5%CVE-2026-106503HIGHBackstage: Scaffolder action input authorization bypassEPSS 0.5%CVE-2026-106501CRITICALBackstage: Sensitive information exposure in ScaffolderEPSS 0.5%CVE-2026-106510HIGHBackstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.ymlEPSS 0.5%CVE-2026-106558HIGHBackstage: Improper validation of TechDocs MkDocs configurationEPSS 0.5%CVE-2026-106455HIGHBackstage: Improper validation of MkDocs plugin configuration in TechDocsEPSS 0.4%CVE-2026-106460MEDIUMBackstage: Explicit negative email verification can be ignored during shared OAuth profile normalizationEPSS 0.4%CVE-2026-106508MEDIUMBackstage: Potential file exposure through local TechDocs publisherEPSS 0.4%CVE-2026-106557HIGHBackstage: Improper input validation in TechDocs Markdown extension configurationEPSS 0.4%CVE-2026-106490MEDIUMBackstage: Improper input validation in TechDocs static content requestsEPSS 0.4%CVE-2026-106486HIGHBackstage: Improper filesystem validation in Bitbucket pull-request scaffolder actionsEPSS 0.4%CVE-2026-106457MEDIUMBackstage: Insufficient audience validation in the Cloudflare Access auth providerEPSS 0.4%CVE-2026-32236LOW@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetchEPSS 0.3%CVE-2026-106500HIGHBackstage: Improper task state validation in Scaffolder backendEPSS 0.3%CVE-2026-106559MEDIUMBackstage: Improper input validation in Confluence to Markdown scaffolder moduleEPSS 0.3%CVE-2026-106560HIGHBackstage: Improper repository path validation in a Scaffolder backend moduleEPSS 0.3%CVE-2026-106505HIGHBackstage: Bypass of MkDocs configuration sanitizer in TechDocs backendEPSS 0.3%CVE-2026-106498HIGHBackstage: Improper URL validation in catalog entity placeholder resolutionEPSS 0.3%CVE-2026-106494MEDIUMBackstage: Improper input validation in cloud storage URL readersEPSS 0.3%CVE-2026-106502MEDIUMBackstage: Sensitive information may be exposed in Scaffolder task failure eventsEPSS 0.3%