Skip to content
OpenAdvisories

Product · backstage

backend-defaults

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-106492

    Backstage: Improper preservation of access restrictions during service credential delegation

    Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential…

    backstage backstage backend-defaults @backstage/backend-defaults npm