What’s Vulnerable › Products

@backstage plugin-auth-backend-module-cloudflare-access-provider vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @backstage plugin-auth-backend-module-cloudflare-access-provider version is affected

Latest @backstage plugin-auth-backend-module-cloudflare-access-provider vulnerabilities

• CVE-2026-106457 — Backstage: Insufficient audience validation in the Cloudflare Access auth provider (CVSS 8.1)