Product · backstage

plugin-scaffolder-backend-module-github

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.4

CVE-2026-106462

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integra…

backstage backstage plugin-scaffolder-backend plugin-scaffolder-backend-module-bitbucket-server Web / CMS npm

Oct 6, 2026