What’s Vulnerable › Products

Linuxfoundation Backstage/Plugin-Auth-Backend-Module-Cloudflare-Access-Provider vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Linuxfoundation Backstage/Plugin-Auth-Backend-Module-Cloudflare-Access-Provider version is affected

Latest Linuxfoundation Backstage/Plugin-Auth-Backend-Module-Cloudflare-Access-Provider vulnerabilities

• CVE-2026-106457 — Backstage: Insufficient audience validation in the Cloudflare Access auth provider (CVSS 8.1)