backstage Plugin Scaffolder Backend Vulnerabilities

Backstage Plugin-scaffolder-backend vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

6 October 2026

Improper Input Validation in Scaffolder Plugin for Backstage by Spotify
CVE-2026-106506
BackstageBackstage5.3MEDIUM
Sensitive Information Exposure in Backstage Plugin from Backstage
CVE-2026-106504
BackstageBackstage6.5MEDIUM
Authorization Bypass in Backstage Plugin by Backstage
CVE-2026-106503
BackstageBackstage8.1HIGH
Sensitive Information Exposure in Backstage Plugin by Backstage
CVE-2026-106502
BackstageBackstage5.3MEDIUM
Sensitive Information Exposure in Backstage Scaffolder Plugin
CVE-2026-106501
BackstageBackstage9.6CRITICAL
Improper Task State Validation in Backstage Scaffolder Backend Plugin Affecting Developer Portals
CVE-2026-106500
BackstageBackstage8.5HIGH
Developer Portal Vulnerability in Backstage by Spotify
CVE-2026-106499
BackstageBackstage4.9MEDIUM
Credential Boundary Bypass in Backstage Framework
CVE-2026-106462
BackstageBackstage6.4MEDIUM
Incorrect Authorization in Backstage Scaffolder Plugin
CVE-2026-106461
BackstageBackstage4.3MEDIUM

12 March 2026

Environment Secrets Exposure in Backstage by Spotify
CVE-2026-32237
@backstagePlugin-scaffolder-backend4.4MEDIUM