Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Missing AuthorizationCVE-2026-106489
Affects @backstage/plugin-techdocs-backend | Versions <2.2.4
Has fix
npmPublished 11 Oct 2026
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-106510
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Deserialization of Untrusted DataCVE-2026-106558
Affects @backstage/plugin-techdocs-node | Versions <1.14.8>=1.15.0 <1.15.6>=2.0.0 <2.0.1
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106455
Affects @backstage/plugin-techdocs-node | Versions >=0.11.12 <1.14.7>=1.15.0 <1.15.5
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106557
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Interpretation ConflictCVE-2026-106505
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Improper Neutralization of Special Elements Used in a Template EngineCVE-2026-106509
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • M
Symlink AttackCVE-2026-106508
Affects @backstage/plugin-techdocs-node | Versions <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Improper Handling of Case SensitivityCVE-2026-106503
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
  • H
Insertion of Sensitive Information into Log FileCVE-2026-106504
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-gitlab | Versions <0.11.10
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-github | Versions <0.9.13
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-server | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-cloud | Versions <0.3.10
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-azure | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106461
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Information ExposureCVE-2026-106506
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-106499
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-106502
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • C
Race ConditionCVE-2026-106500
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
  • C
Insertion of Sensitive Information Into Sent DataCVE-2026-106501
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
  • L
Incorrect AuthorizationCVE-2026-106496
Affects @backstage/plugin-catalog-backend | Versions <3.9.1
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106498
Affects @backstage/plugin-catalog-backend | Versions <3.9.1
Has fix
npmPublished 11 Oct 2026
  • M
External Control of File Name or PathCVE-2026-106494
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-azure | Versions <0.3.21
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-aws | Versions <0.4.27
Has fix
npmPublished 11 Oct 2026
  • L
Directory TraversalCVE-2026-106493
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
  • H
Incorrect AuthorizationCVE-2026-106492
Affects @backstage/backend-defaults | Versions <0.16.1>=0.17.0 <0.17.8
Has fix
npmPublished 11 Oct 2026
  • H
Insufficient Session ExpirationCVE-2026-107721
Affects fast-jwt | Versions <6.3.0
Has fix
npmPublished 11 Oct 2026