Vulnerabilidades en backstage
69 resultadosCVE-2026-29184LOW@backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction BypassEPSS 0.3%CVE-2025-32791MEDIUMPermission policy information leakage in Backstage permission systemEPSS 0.3%CVE-2026-106502MEDIUMBackstage: Sensitive information may be exposed in Scaffolder task failure eventsEPSS 0.3%CVE-2026-106489MEDIUMBackstage: Improper authorization enforcement for TechDocs static contentEPSS 0.3%CVE-2024-46976MEDIUMCircumvention of cross site scripting Protection in @backstage/plugin-techdocs-backendEPSS 0.3%CVE-2026-106488HIGHBackstage: Improper authentication in the OIDC providerEPSS 0.3%CVE-2026-106493LOWBackstage: Cloud storage catalog locations may cross configured storage boundariesEPSS 0.3%CVE-2026-106491MEDIUMBackstage: Improper input validation in proxy-backendEPSS 0.3%CVE-2026-106499MEDIUMBackstage: Secret-derived values may be exposed in scaffolder task logsEPSS 0.3%CVE-2026-106458MEDIUMBackstage: Inconsistent repository filtering in Bitbucket Server catalog event updatesEPSS 0.3%CVE-2026-106487LOWBackstage: Unsupported catalog cluster authentication mode in kubernetes backendEPSS 0.3%CVE-2025-55285LOW@backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`EPSS 0.3%CVE-2026-106504MEDIUMBackstage: Sensitive information exposure in scaffolder task logsEPSS 0.3%CVE-2026-106556HIGHBackstage: Configuration bypass in TechDocs mkdocs.yml sanitizationEPSS 0.3%CVE-2026-106496LOWBackstage: Inconsistent enforcement of allowed location types during catalog processingEPSS 0.2%CVE-2026-106495MEDIUMBackstage: Improper access control in backend action invocationEPSS 0.2%CVE-2026-106456MEDIUMBackstage: Inconsistent credential enforcement for overlapping proxy routesEPSS 0.2%CVE-2026-24048LOWBackstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`EPSS 0.2%CVE-2026-106563MEDIUMBackstage: Improper entity validation in deprecated Kubernetes services endpointEPSS 0.2%CVE-2026-106506MEDIUMBackstage: Improper input validation in scaffolder task list orderingEPSS 0.2%