Alta
CVE-2026-106459
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 21
Restablecer filtros
Media
CVE-2026-106559
Backstage: Improper input validation in Confluence to Markdown scaffolder module
Alta
CVE-2026-106560
Backstage: Improper repository path validation in a Scaffolder backend module
Media
CVE-2026-106462
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback
Alta
CVE-2026-106486
Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions
Crítica
CVE-2026-106501
Backstage: Sensitive information exposure in Scaffolder
Media
CVE-2026-106499
Backstage: Secret-derived values may be exposed in scaffolder task logs
Alta
CVE-2026-106503
Backstage: Scaffolder action input authorization bypass
Alta
CVE-2026-106500
Backstage: Improper task state validation in Scaffolder backend
Media
CVE-2026-106461
Backstage: Incorrect authorization in scaffolder task listing
Media
CVE-2026-106502
Backstage may expose sensitive information in Scaffolder task failure events
Media
CVE-2026-106504
Backstage has sensitive information exposure in scaffolder task logs
Media
CVE-2026-106506
Backstage has improper input validation in scaffolder task list ordering
Media
CVE-2026-32237
@backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpoint
Baja
CVE-2026-29184
@backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass
Alta
CVE-2026-24046
Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Baja
CVE-2025-55285
Template Secret leakage in logs in Scaffolder when using `fetch:template`
Alta
CVE-2023-35926
Backstage Scaffolder plugin has insecure sandbox
Alta
ghsa-2g8g-63j4-9w3r
RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend
Alta
CVE-2021-43783
Path Traversal in @backstage/plugin-scaffolder-backend
Media
CVE-2021-41151
Path Traversal in @backstage/plugin-scaffolder-backend
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.