@backstage backend-defaults vulnerabilities
3 published CVEs name @backstage backend-defaults among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-106495
Backstage: Improper access control in backend action invocation
backstage · backstage
Medium4.3 - CVE-2026-106494
Backstage: Improper input validation in cloud storage URL readers
backstage · backstage
Medium4.4 - CVE-2026-106492
Backstage: Improper preservation of access restrictions during service credential delegation
backstage · backstage
High7.6