Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-github | Versions <0.9.13
Has fix
npmPublished 11 Oct 2026
- M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-server | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
- M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-cloud | Versions <0.3.10
Has fix
npmPublished 11 Oct 2026
- M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-azure | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
- M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
- M
Incorrect AuthorizationCVE-2026-106461
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
- M
Information ExposureCVE-2026-106506
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
- M
Insertion of Sensitive Information into Log FileCVE-2026-106499
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
- M
Insertion of Sensitive Information into Log FileCVE-2026-106502
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
- C
Race ConditionCVE-2026-106500
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
- C
Insertion of Sensitive Information Into Sent DataCVE-2026-106501
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
- L
Incorrect AuthorizationCVE-2026-106496
Affects @backstage/plugin-catalog-backend | Versions <3.9.1
Has fix
npmPublished 11 Oct 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-106498
Affects @backstage/plugin-catalog-backend | Versions <3.9.1
Has fix
npmPublished 11 Oct 2026
- M
External Control of File Name or PathCVE-2026-106494
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
- L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-azure | Versions <0.3.21
Has fix
npmPublished 11 Oct 2026
- L
Directory TraversalCVE-2026-106493
Affects @backstage/plugin-catalog-backend-module-aws | Versions <0.4.27
Has fix
npmPublished 11 Oct 2026
- L
Directory TraversalCVE-2026-106493
Affects @backstage/backend-defaults | Versions <0.17.8
Has fix
npmPublished 11 Oct 2026
- H
Incorrect AuthorizationCVE-2026-106492
Affects @backstage/backend-defaults | Versions <0.16.1>=0.17.0 <0.17.8
Has fix
npmPublished 11 Oct 2026
- H
Insufficient Session ExpirationCVE-2026-107721
Affects fast-jwt | Versions <6.3.0
Has fix
npmPublished 11 Oct 2026
- H
Improper Validation of Specified Type of InputCVE-2026-107723
Affects fast-jwt | Versions <6.3.0
Has fix
npmPublished 11 Oct 2026
- L
Insufficient Session ExpirationCVE-2026-107719
Affects fast-jwt | Versions <6.3.4
Has fix
npmPublished 11 Oct 2026
- C
Improper Verification of Cryptographic SignatureCVE-2026-107720
Affects fast-jwt | Versions <6.3.1
Has fix
npmPublished 11 Oct 2026
- C
Improper Verification of Cryptographic SignatureCVE-2026-107724
Affects fast-jwt | Versions >=6.2.4 <6.3.0
Has fix
npmPublished 11 Oct 2026
- C
Improper Verification of Cryptographic SignatureCVE-2026-107722
Affects fast-jwt | Versions >=6.2.0 <6.3.0
Has fix
npmPublished 11 Oct 2026
- M
Open RedirectCVE-2026-107718
Affects @adonisjs/http-server | Versions <8.2.3>=9.0.0 <9.3.0
Has fix
npmPublished 11 Oct 2026
Affects @library-wide/library-shell | Versions =99.9.1
Has fix
npmPublished 10 Oct 2026
Affects kmf-bootstrap | Versions =100.100.103=100.100.102
Has fix
npmPublished 10 Oct 2026