plugin-search-backend

1 result · Clear filters · Feed

• Medium 4.3
  CVE-2026-106562

  Backstage: Incorrect authorization in search engine permission filtering

  Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. A…

  backstage backstage plugin-search-backend plugin-search-backend-module-elasticsearch npm
  Oct 7, 2026