Linuxfoundation Backstage vulnerabilities
53 published vulnerabilities in Linuxfoundation Backstage. The most were published in 2026 (45), and 45 so far in 2026.
Linuxfoundation Backstage vulnerabilities by year
2021
2023
2024
2026
Most exploited Linuxfoundation Backstage vulnerabilities
- CVE-2026-106501 Backstage: Sensitive information exposure in Scaffolder
- CVE-2026-106558 Backstage: Improper validation of TechDocs MkDocs configuration
- CVE-2026-88064 Backstage: Improper input validation in TechDocs MkDocs configuration
- CVE-2026-106459 Backstage: Improper input validation in Sentry scaffolder actions
- CVE-2026-106486 Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions
- CVE-2026-106500 Backstage: Improper task state validation in Scaffolder backend
- CVE-2021-43783 Path Traversal in @backstage/plugin-scaffolder-backend
- CVE-2026-106488 Backstage: Improper authentication in the OIDC provider
- CVE-2026-106503 Backstage: Scaffolder action input authorization bypass
- CVE-2023-35926 Insecure sandbox in Backstage Scaffolder plugin
- CVE-2026-106510 Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
- CVE-2026-106556 Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.