@backstage plugin-scaffolder-backend-module-bitbucket-cloud

• CVE-2026-106486 High 8.5 Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions 0.4%
• CVE-2026-106462 Medium 6.4 Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback 0.2%