Known vulnerabilities in @backstage plugin-catalog-backend
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-106498 | Backstage is an open framework for building developer portals | 7.7 High | Oct 6, 2026 |
| CVE-2026-106497 | Backstage is an open framework for building developer portals | 4.3 Medium | Oct 6, 2026 |
| CVE-2026-106496 | Backstage is an open framework for building developer portals | 3.1 Low | Oct 6, 2026 |
Other @backstage products
plugin-scaffolder-backend 10
plugin-techdocs-node 8
backend-defaults 3
plugin-kubernetes-backend 3
plugin-proxy-backend 2
plugin-techdocs-backend 2
plugin-scaffolder-backend-module-confluence-to-markdown 2
plugin-scaffolder-backend-module-bitbucket-server 2
plugin-scaffolder-backend-module-bitbucket-cloud 2
plugin-auth-backend 2
plugin-scaffolder-backend-module-gitlab 1
plugin-auth-backend-module-oidc-provider 1