CVE Tools
Track your stack

@backstage

40 CVEs tracked since 2026. Since Oct 2026, none of them reached CISA KEV.

@backstage CVEs per month

Oct 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
@backstage CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-10400

Products

The products that kept showing up in @backstage's monthly top three, with their CVEs summed over those months.

  1. Plugin-scaffolder-backend91 month
  2. Plugin-techdocs-node81 month
  3. Plugin-catalog-backend31 month

Latest CVEs

The 15 most recently published vulnerabilities affecting @backstage.

  1. CVE-2026-106495Backstage: Improper access control in backend action invocation4.3
  2. CVE-2026-106557Backstage: Improper input validation in TechDocs Markdown extension configuration7.7
  3. CVE-2026-106563Backstage: Improper entity validation in deprecated Kubernetes services endpoint5.3
  4. CVE-2026-106562Backstage: Incorrect authorization in search engine permission filtering4.3
  5. CVE-2026-106561Backstage: Sensitive information disclosure in Kubernetes resource queries5.0
  6. CVE-2026-106560Backstage: Improper repository path validation in a Scaffolder backend module7.1
  7. CVE-2026-106559Backstage: Improper input validation in Confluence to Markdown scaffolder module6.3
  8. CVE-2026-106558Backstage: Improper validation of TechDocs MkDocs configuration8.8
  9. CVE-2026-106556Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization7.7
  10. CVE-2026-106510Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml7.7
  11. CVE-2026-106509Backstage: Improper validation of MkDocs theme configuration in TechDocs7.7
  12. CVE-2026-106508Backstage: Potential file exposure through local TechDocs publisher5.3
  13. CVE-2026-106507Backstage: TechDocs arbitrary file read via mkdocs snippets5.3
  14. CVE-2026-106506Backstage: Improper input validation in scaffolder task list ordering5.3
  15. CVE-2026-106505Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend7.7

The record

Peak rank
#11 in Oct 2026
Busiest month shown
Oct 2026, 40 CVEs
Months with a KEV entry
0 since Oct 2026
Monthly snapshots
1 since 2026
@backstage's full record, month by month