What’s Vulnerable › Products

openchoreo backstage-plugins vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your openchoreo backstage-plugins version is affected

Latest openchoreo backstage-plugins vulnerabilities

• CVE-2026-73666 — OpenChoreo: Unauthenticated Backstage developer-portal API exposes OpenChoreo catalog data, scaffolder logs, and allows unauthenticated catalog write/delete (CVSS 8.2)