Product · backstage

plugin-scaffolder-backend-module-bitbucket-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.5

CVE-2026-106486

Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder act…

backstage backstage plugin-scaffolder-backend-module-bitbucket-cloud plugin-scaffolder-backend-module-bitbucket-server npm

Oct 6, 2026