@backstage backstage

• CVE-2026-24048 Low 3.5 Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow` 0.2%
• CVE-2026-24047 Medium 6.3 @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass 0.5%
• CVE-2026-24046 High 7.1 Backstage has a Possible Symlink Path Traversal in Scaffolder Actions 0.5%
• CVE-2025-55285 Low 2.6 @backstage/plugin-scaffolder-backend Template Secret Leakage in Logs in Scaffolder When Using `fetch:template` 0.3%
• CVE-2025-32791 Medium 4.3 Permission policy information leakage in Backstage permission system 0.3%
• CVE-2024-53983 Medium 5.4 Server-side request forgery in Backstage Scaffolder plugin 0.4%
• CVE-2024-47762 Medium 5.8 Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend 0.4%
• CVE-2024-45815 Medium 6.5 Prototype pollution in @backstage/plugin-catalog-backend 0.5%
• CVE-2024-45816 Medium 6.5 Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend 0.7%
• CVE-2024-46976 Medium 6.5 Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend 0.3%
• CVE-2024-26150 High 8.7 `@backstage/backend-common` vulnerable to path traversal through symlinks 0.8%
• CVE-2023-35926 High 8.1 Insecure sandbox in Backstage Scaffolder plugin 1.9%
• CVE-2023-25571 Medium 6.8 Backstage has XSS Vulnerability in Software Catalog 0.5%
• CVE-2021-43783 High 8.5 Path Traversal in @backstage/plugin-scaffolder-backend 1.2%
• CVE-2021-43776 High 7.4 XSS vulnerability in @backstage/plugin-auth-backend 0.7%
• CVE-2021-41151 Medium 6.8 Path Traversal in @backstage/plugin-scaffolder-backend 1.3%
• CVE-2021-32662 Medium 6.5 TechDocs mkdocs.yml path traversal 1.3%
• CVE-2021-32661 Medium 6.8 TechDocs object element script injection 1.2%
• CVE-2021-32660 Medium 6.8 TechDocs content sanitization bypass 1.3%