Linux / Backstage
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-32236 | @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch | LOW | 1.7 | Mar 12, 2026 |
| CVE-2026-32235 | @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass | MEDIUM | 5.9 | Mar 12, 2026 |
| CVE-2026-25152 | @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator | MEDIUM | 6.5 | Jan 30, 2026 |
| CVE-2026-25153 | @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks | HIGH | 8.8 | Jan 30, 2026 |
| CVE-2024-45815 | Prototype pollution in @backstage/plugin-catalog-backend | HIGH | 7.1 | Sep 17, 2024 |
| CVE-2024-45816 | Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend | HIGH | 7.7 | Sep 17, 2024 |
| CVE-2024-46976 | Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend | MEDIUM | 4.8 | Sep 17, 2024 |
| CVE-2023-6944 | Rhdh: catalog-import function leaks credentials to frontend | HIGH | 7.3 | Jan 4, 2024 |
| CVE-2023-35926 | Insecure sandbox in Backstage Scaffolder plugin | CRITICAL | 9.9 | Jun 22, 2023 |
| CVE-2021-43783 | Path Traversal in @backstage/plugin-scaffolder-backend | HIGH | 8.5 | Nov 29, 2021 |
| CVE-2021-41151 | Path Traversal in @backstage/plugin-scaffolder-backend | MEDIUM | 6.8 | Oct 18, 2021 |
| CVE-2021-32662 | TechDocs mkdocs.yml path traversal | MEDIUM | 6.5 | Jun 3, 2021 |
Showing 1 to 12 of 12 CVEs