Product · backstage

plugin-catalog-backend-module-gitlab

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2026-106463

Backstage: Improper authorization in GitLab organizational user ingestion

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organizati…

backstage backstage plugin-catalog-backend-module-gitlab @backstage/plugin-catalog-backend-module-gitlab Web / CMS npm

Oct 6, 2026