@backstage/plugin-scaffolder-backend-module-bitbucket-server

2 results · Feed

• High 8.5
  CVE-2026-106486

  Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

  Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder act…

  backstage backstage plugin-scaffolder-backend-module-bitbucket-cloud plugin-scaffolder-backend-module-bitbucket-server npm
  Oct 6, 2026
• Medium 6.4
  CVE-2026-106462

  Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

  Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integra…

  backstage backstage plugin-scaffolder-backend plugin-scaffolder-backend-module-bitbucket-server Web / CMS npm
  Oct 6, 2026