Vulnerabilidades de @backstage plugin-auth-backend-module-oidc-provider (CVE)

Registros CVE publicados para @backstage plugin-auth-backend-module-oidc-provider, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados
8.1Alta
CVE-2026-106488

Backstage: Improper authentication in the OIDC provider

backstage backstage; @backstage plugin-auth-backend-module-oidc-provider

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution…