Skip to content
OpenAdvisories

Product · backstage

plugin-auth-node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.8
    CVE-2026-106460

    Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization

    Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not consistently honor explicit negative email verification during shared OAuth profile normalization. The affected p…

    backstage backstage plugin-auth-node @backstage/plugin-auth-node npm