@backstage plugin-scaffolder-backend-module-github vulnerabilities (CVE)

CVE records published for @backstage plugin-scaffolder-backend-module-github, newest first. Follow to get an email when a new one appears.

1 results
6.4Medium
CVE-2026-106462

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

backstage backstage; @backstage plugin-scaffolder-backend; @backstage plugin-scaffolder-backend-module-azure; @backstage plugin-scaffolder-backend-module-bitbucket-cloud

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integra…