Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Incorrect AuthorizationCVE-2026-106458
Affects @backstage/plugin-catalog-backend-module-bitbucket-server | Versions >=0.4.0 <0.5.15
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106562
Affects @backstage/plugin-search-backend | Versions <2.1.6
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106562
Affects @backstage/plugin-search-backend-module-elasticsearch | Versions <1.8.7
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106561
Affects @backstage/plugin-kubernetes-backend | Versions <0.21.9
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106456
Affects @backstage/plugin-proxy-backend | Versions >=0.5.0 <0.6.18
Has fix
npmPublished 11 Oct 2026
  • H
Improper Verification of Cryptographic SignatureCVE-2026-106460
Affects @backstage/plugin-auth-node | Versions >=0.3.0 <0.6.15>=0.7.0 <0.7.5
Has fix
npmPublished 11 Oct 2026
  • L
Unintended Proxy or Intermediary ('Confused Deputy')CVE-2026-106487
Affects @backstage/plugin-kubernetes-backend | Versions <0.21.10
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106459
Affects @backstage/plugin-scaffolder-backend-module-sentry | Versions >=0.3.0 <0.3.8
Has fix
npmPublished 11 Oct 2026
  • C
Symlink AttackCVE-2026-106486
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-cloud | Versions <0.3.10
Has fix
npmPublished 11 Oct 2026
  • C
Symlink AttackCVE-2026-106486
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-server | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • H
Relative Path TraversalCVE-2026-106490
Affects @backstage/plugin-techdocs-backend | Versions <2.2.4
Has fix
npmPublished 11 Oct 2026
  • H
Missing AuthorizationCVE-2026-106489
Affects @backstage/plugin-techdocs-backend | Versions <2.2.4
Has fix
npmPublished 11 Oct 2026
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')CVE-2026-106510
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Deserialization of Untrusted DataCVE-2026-106558
Affects @backstage/plugin-techdocs-node | Versions <1.14.8>=1.15.0 <1.15.6>=2.0.0 <2.0.1
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106455
Affects @backstage/plugin-techdocs-node | Versions >=0.11.12 <1.14.7>=1.15.0 <1.15.5
Has fix
npmPublished 11 Oct 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-106557
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Interpretation ConflictCVE-2026-106505
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Improper Neutralization of Special Elements Used in a Template EngineCVE-2026-106509
Affects @backstage/plugin-techdocs-node | Versions <1.14.6>=1.15.0 <1.15.4
Has fix
npmPublished 11 Oct 2026
  • M
Symlink AttackCVE-2026-106508
Affects @backstage/plugin-techdocs-node | Versions <1.15.4
Has fix
npmPublished 11 Oct 2026
  • H
Improper Handling of Case SensitivityCVE-2026-106503
Affects @backstage/plugin-scaffolder-backend | Versions <3.3.1>=3.4.0 <3.4.1>=4.0.0 <4.0.3>=4.0.4 <4.1.0
Has fix
npmPublished 11 Oct 2026
  • H
Insertion of Sensitive Information into Log FileCVE-2026-106504
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-gitlab | Versions <0.11.10
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-github | Versions <0.9.13
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-server | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-bitbucket-cloud | Versions <0.3.10
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend-module-azure | Versions <0.2.25
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106462
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Incorrect AuthorizationCVE-2026-106461
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Information ExposureCVE-2026-106506
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-106499
Affects @backstage/plugin-scaffolder-backend | Versions <4.1.0
Has fix
npmPublished 11 Oct 2026