Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-auth-backend

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.7
    CVE-2026-73563

    Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`

    Backstage is an open framework for building developer portals. Prior to 0.29.2, the experimental dynamic client registration and client ID metadata document features in the @backstage/plugin-auth-backend use full-string matcher.isMatch glob matching for auth.…

    backstage backstage @backstage/plugin-auth-backend npm
  • Low 1.7
    CVE-2026-32236

    @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch

    Backstage is an open framework for building developer portals. Prior to 0.27.1, a Server-Side Request Forgery (SSRF) vulnerability exists in @backstage/plugin-auth-backend when auth.experimentalClientIdMetadataDocuments.enabled is set to true. The CIMD metada…

    backstage plugin-auth-backend @backstage/plugin-auth-backend npm
  • Medium 5.9
    CVE-2026-32235

    @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass

    Backstage is an open framework for building developer portals. Prior to 0.27.1, the experimental OIDC provider in @backstage/plugin-auth-backend is vulnerable to a redirect URI allowlist bypass. Instances that have enabled experimental Dynamic Client Registra…

    backstage plugin-auth-backend @backstage/plugin-auth-backend npm
  • High 7.4
    CVE-2021-43776

    XSS vulnerability in @backstage/plugin-auth-backend

    Backstage is an open platform for building developer portals. In affected versions the auth-backend plugin allows a malicious actor to trick another user into visiting a vulnerable URL that executes an XSS attack. This attack can potentially allow the attacke…

    backstage backstage @backstage/plugin-auth-backend npm