What’s Vulnerable › Products

@backstage backend-defaults vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @backstage backend-defaults version is affected

Latest @backstage backend-defaults vulnerabilities

• CVE-2026-106495 — Backstage: Improper access control in backend action invocation (CVSS 4.3)