CVE ID :CVE-2026-106503 Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 11 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-106503 - Backstage: Scaffolder action input authorization bypass

VERWANDTEARTIKEL

CVE-2026-106500 - Backstage: Improper task state validation in Scaffolder backend

CVE-2026-106501 - Backstage: Sensitive information exposure in Scaffolder

CVE-2026-106547 - HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata

Ninja Forms plugin flaw exploited to hack WordPress sites

CVE-2026-106488 - Backstage: Improper authentication in the OIDC provider

CVE-2026-106486 - Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions