# Linuxfoundation Backstage


- [CVE-2026-106501](https://insights.sbomify.com/CVE-2026-106501/): Backstage: Sensitive information exposure in Scaffolder (critical 9.6)
- [CVE-2026-106558](https://insights.sbomify.com/CVE-2026-106558/): Backstage: Improper validation of TechDocs MkDocs configuration (high 8.8)
- [CVE-2026-88064](https://insights.sbomify.com/CVE-2026-88064/): Backstage: Improper input validation in TechDocs MkDocs configuration (high 8.8)
- [CVE-2026-106459](https://insights.sbomify.com/CVE-2026-106459/): Backstage: Improper input validation in Sentry scaffolder actions (high 8.5)
- [CVE-2026-106486](https://insights.sbomify.com/CVE-2026-106486/): Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions (high 8.5)
- [CVE-2026-106500](https://insights.sbomify.com/CVE-2026-106500/): Backstage: Improper task state validation in Scaffolder backend (high 8.5)
- [CVE-2021-43783](https://insights.sbomify.com/CVE-2021-43783/): Path Traversal in @backstage/plugin-scaffolder-backend (high 8.5)
- [CVE-2026-106488](https://insights.sbomify.com/CVE-2026-106488/): Backstage: Improper authentication in the OIDC provider (high 8.1)
- [CVE-2026-106503](https://insights.sbomify.com/CVE-2026-106503/): Backstage: Scaffolder action input authorization bypass (high 8.1)
- [CVE-2023-35926](https://insights.sbomify.com/CVE-2023-35926/): Insecure sandbox in Backstage Scaffolder plugin (high 8.1)
- [CVE-2026-106510](https://insights.sbomify.com/CVE-2026-106510/): Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml (high 7.7)
- [CVE-2026-106556](https://insights.sbomify.com/CVE-2026-106556/): Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/products/linuxfoundation/backstage/