Product · backstage

plugin-scaffolder-backend

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.6

CVE-2026-106501

Backstage: Sensitive information exposure in Scaffolder

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in scaffolder. An authenticated Backstage user who can read a…

backstage backstage plugin-scaffolder-backend @backstage/plugin-scaffolder-backend npm

Oct 6, 2026