Product · backstage

plugin-auth-backend-module-oidc-provider

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2026-106488

Backstage: Improper authentication in the OIDC provider

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution…

backstage backstage plugin-auth-backend-module-oidc-provider @backstage/plugin-auth-backend-module-oidc-provider npm

Oct 6, 2026