Backstage

This hub aggregates every CVE we track for Backstage, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Backstage.

• CVE-2026-73563Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`4.7Aug 13, 2026
• CVE-2026-32236@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch7.5Mar 12, 2026
• CVE-2026-32235@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass5.9Mar 12, 2026
• CVE-2026-29186@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution7.7Mar 7, 2026
• CVE-2026-29184@backstage/plugin-scaffolder-backend: Potential Session Token Exfiltration via Log Redaction Bypass2.0Mar 7, 2026
• CVE-2026-29185@backstage/integration: Potential reading of SCM URLs using built in token2.7Mar 7, 2026
• CVE-2026-25152@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator5.3Jan 30, 2026
• CVE-2026-25153@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks7.7Jan 30, 2026
• CVE-2026-24048Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`3.5Jan 21, 2026
• CVE-2026-24047@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass6.3Jan 21, 2026
• CVE-2026-24046Backstage has a Possible Symlink Path Traversal in Scaffolder Actions7.1Jan 21, 2026
• CVE-2025-55285@backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template`2.6Aug 15, 2025
• CVE-2025-32791Permission policy information leakage in Backstage permission system4.3Apr 16, 2025
• CVE-2024-53983Server-side request forgery in Backstage Scaffolder plugin5.4Nov 29, 2024
• CVE-2024-47762Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend5.8Oct 3, 2024