@backstage backend-defaults vulnerabilities

3 published CVEs name @backstage backend-defaults among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-106495
Backstage: Improper access control in backend action invocation
backstage · backstage
Medium4.3
CVE-2026-106494
Backstage: Improper input validation in cloud storage URL readers
backstage · backstage
Medium4.4
CVE-2026-106492
Backstage: Improper preservation of access restrictions during service credential delegation
backstage · backstage
High7.6

Most common weaknesses