What’s Vulnerable › Products

Linuxfoundation Backstage/Plugin-Auth-Backend vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Linuxfoundation Backstage/Plugin-Auth-Backend version is affected

Latest Linuxfoundation Backstage/Plugin-Auth-Backend vulnerabilities

• CVE-2026-73563 — Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend` (CVSS 6.1)