backstage Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by backstage

JSON RSS CSV 🔔 Create Alert Trigger

30 January 2026

Arbitrary Code Execution Vulnerability in Backstage TechDocs Plugin
CVE-2026-25153
BackstageBackstage7.7HIGH

21 January 2026

Path Traversal Vulnerability in Backstage Framework by Spotify
CVE-2026-24046
BackstageBackstage7.1HIGH

23 February 2024

Path traversal vulnerabilities in @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10
CVE-2024-26150
BackstageBackstage7.5HIGH

22 June 2023

Insecure sandbox in Backstage Scaffolder plugin
CVE-2023-35926
BackstageBackstage8.1HIGH

29 November 2021

Path Traversal in @backstage/plugin-scaffolder-backend
CVE-2021-43783
BackstageBackstage8.5HIGH

26 November 2021

XSS vulnerability in @backstage/plugin-auth-backend
CVE-2021-43776
BackstageBackstage7.4HIGH