@backstage plugin-scaffolder-backend

• CVE-2026-106506 Medium 5.3 Backstage: Improper input validation in scaffolder task list ordering 0.2%
• CVE-2026-106504 Medium 6.5 Backstage: Sensitive information exposure in scaffolder task logs 0.3%
• CVE-2026-106503 High 8.1 Backstage: Scaffolder action input authorization bypass 0.5%
• CVE-2026-106502 Medium 5.3 Backstage: Sensitive information may be exposed in Scaffolder task failure events 0.3%
• CVE-2026-106501 Critical 9.6 Backstage: Sensitive information exposure in Scaffolder 0.5%
• CVE-2026-106500 High 8.5 Backstage: Improper task state validation in Scaffolder backend 0.3%
• CVE-2026-106499 Medium 4.9 Backstage: Secret-derived values may be exposed in scaffolder task logs 0.3%
• CVE-2026-106462 Medium 6.4 Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback 0.2%
• CVE-2026-106461 Medium 4.3 Backstage: Incorrect authorization in scaffolder task listing 0.2%
• CVE-2026-32237 Medium 4.4 @backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint 0.3%