Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-scaffolder-backend

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.1
    CVE-2026-106503

    Backstage: Scaffolder action input authorization bypass

    Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected …

    backstage backstage plugin-scaffolder-backend @backstage/plugin-scaffolder-backend npm
  • High 8.5
    CVE-2026-106500

    Backstage: Improper task state validation in Scaffolder backend

    Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper task state validation in scaffolder backend. An authenticated user with permission …

    backstage backstage plugin-scaffolder-backend @backstage/plugin-scaffolder-backend npm
  • High 7.1
    CVE-2026-24046 Public exploit

    Backstage has a Possible Symlink Path Traversal in Scaffolder Actions

    Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based path traversal attacks. An attacker with access to create and execute Scaffolder templates could explo…

    backstage backstage @backstage/plugin-scaffolder-backend @backstage/backend-defaults npm
  • High 8.1
    CVE-2023-35926

    Insecure sandbox in Backstage Scaffolder plugin

    Backstage is an open platform for building developer portals. The Backstage scaffolder-backend plugin uses a templating library that requires sandbox, as it by design allows for code injection. The library used for this sandbox so far has been `vm2`, but in l…

    backstage backstage @backstage/plugin-scaffolder-backend npm
  • High —
    GHSA-2g8g-63j4-9w3r

    RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend

    The templating library used by the scaffolder backend assumes that templates are trusted which is an undesired property of the scaffolder-backend. This has now been mitigated by sandboxing the template code execution. ### Impact A malicious actor with write a…

    @backstage/plugin-scaffolder-backend npm
  • High 8.5
    CVE-2021-43783

    Path Traversal in @backstage/plugin-scaffolder-backend

    @backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor with write access to a registered scaffolder template is able to manipulate the template in a way that writes files to arb…

    backstage backstage @backstage/plugin-scaffolder-backend npm