{"api_version":"v1","generated_at":"2026-10-07T22:50:00+00:00","product":{"cve_count":58,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-backstage-backstage-67d954753a75","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/backstage","name":"backstage","next_cursor":"djE6NTA","observations":[{"affected":"backstage: < 1.50.5, >= 1.51.0-next.0, < 1.54.6; plugin-techdocs-node: < 1.14.6, >= 1.15.0, < 1.15.4","affected_versions_present":true,"cve_id":"CVE-2026-106509","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106509","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:50:07.721Z","patch_url":"","primary_source":"","published":"2026-10-06T21:50:07.721Z"},{"affected":"backstage: < 1.54.6; plugin-techdocs-node: < 1.15.4","affected_versions_present":true,"cve_id":"CVE-2026-106508","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106508","fixed":"1.15.4.","last_modified":"2026-10-06T21:47:35.516Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-cm77-ch27-6w6v","primary_source":"","published":"2026-10-06T21:47:35.516Z"},{"affected":"backstage: < 1.54.6; plugin-techdocs-node: < 1.15.4","affected_versions_present":true,"cve_id":"CVE-2026-106507","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106507","fixed":"1.15.4.","last_modified":"2026-10-06T21:46:08.014Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-vmqh-7cj9-mvcj","primary_source":"","published":"2026-10-06T21:46:08.014Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106506","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106506","fixed":"4.1.0.","last_modified":"2026-10-06T21:44:31.904Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-vwp5-f99x-x3rq","primary_source":"","published":"2026-10-06T21:44:31.904Z"},{"affected":"backstage: < 1.50.5, >= 1.51.0-next.0, < 1.54.6; plugin-techdocs-node: < 1.14.6, >= 1.15.0, < 1.15.4","affected_versions_present":true,"cve_id":"CVE-2026-106505","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106505","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:43:08.370Z","patch_url":"","primary_source":"","published":"2026-10-06T21:43:08.370Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106504","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106504","fixed":"4.1.0.","last_modified":"2026-10-06T21:40:15.510Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-4xvq-3m68-h444","primary_source":"","published":"2026-10-06T21:40:15.510Z"},{"affected":"backstage: < 1.49.6, >= 1.50.0-next.0, < 1.50.5, >= 1.51.0-next.0, < 1.54.6; plugin-scaffolder-backend: < 3.3.1, >= 3.4.0, < 3.4.1, >= 4.0.0, < 4.0.3, >= 4.0.4, < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106503","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106503","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:37:33.675Z","patch_url":"","primary_source":"","published":"2026-10-06T21:37:33.675Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106502","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106502","fixed":"4.1.0.","last_modified":"2026-10-06T21:34:43.208Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-95p4-vv4g-jxxm","primary_source":"","published":"2026-10-06T21:34:43.208Z"},{"affected":"backstage: < 1.49.6, >= 1.50.0-next.0, < 1.50.5, >= 1.51.0-next.0, < 1.54.6; plugin-scaffolder-backend: < 3.3.1, >= 3.4.0, < 3.4.1, >= 4.0.0, < 4.0.3, >= 4.0.4, < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106501","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106501","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:32:25.997Z","patch_url":"","primary_source":"","published":"2026-10-06T21:32:25.997Z"},{"affected":"backstage: < 1.49.6, >= 1.50.0-next.0, < 1.50.5, >= 1.51.0-next.0, < 1.54.6; plugin-scaffolder-backend: < 3.3.1, >= 3.4.0, < 3.4.1, >= 4.0.0, < 4.0.3, >= 4.0.4, < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106500","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106500","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:29:10.626Z","patch_url":"","primary_source":"","published":"2026-10-06T21:29:10.626Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106499","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106499","fixed":"4.1.0.","last_modified":"2026-10-06T21:25:56.166Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-mfvq-x7vr-rgqg","primary_source":"","published":"2026-10-06T21:25:56.166Z"},{"affected":"backstage: < 1.49.6, >= 1.50.0-next.0, < 1.50.5, >= 1.51.0-next.0, < 1.51.3, >= 1.52.0-next.0, < 1.53.2, >= 1.54.0-next.0, < 1.54.6; plugin-catalog-backend: < 3.5.1, >= 3.6.0, < 3.6.2, >= 3.7.0, < 3.7.2, >= 3.8.0, < 3.8.2, >= 3.9.0, < 3.9.1","affected_versions_present":true,"cve_id":"CVE-2026-106498","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106498","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T21:23:37.560Z","patch_url":"","primary_source":"","published":"2026-10-06T21:23:37.560Z"},{"affected":"backstage: < 1.54.6; plugin-catalog-backend: < 3.9.1","affected_versions_present":true,"cve_id":"CVE-2026-106497","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106497","fixed":"3.9.1.","last_modified":"2026-10-06T21:18:31.150Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-8429-xpcj-3cg5","primary_source":"","published":"2026-10-06T21:18:31.150Z"},{"affected":"backstage: < 1.54.6; plugin-catalog-backend: < 3.9.1","affected_versions_present":true,"cve_id":"CVE-2026-106496","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106496","fixed":"3.9.1.","last_modified":"2026-10-06T21:17:11.966Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-pcmq-25r3-5w9v","primary_source":"","published":"2026-10-06T21:17:11.966Z"},{"affected":"backstage: < 1.54.6; backend-defaults: < 0.17.8","affected_versions_present":true,"cve_id":"CVE-2026-106494","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106494","fixed":"0.17.8.","last_modified":"2026-10-06T20:54:14.590Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-7649-wm97-w3j3","primary_source":"","published":"2026-10-06T20:54:14.590Z"},{"affected":"backstage: < 1.54.6; plugin-catalog-backend-module-azure: < 0.17.8, < 0.3.21; plugin-catalog-backend-module-aws: < 0.4.27","affected_versions_present":true,"cve_id":"CVE-2026-106493","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106493","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:52:02.451Z","patch_url":"","primary_source":"","published":"2026-10-06T20:52:02.451Z"},{"affected":"backstage: < 1.49.6, >= 1.50.0-next.0, < 1.54.6; backend-defaults: < 0.16.1, >= 0.17.0, < 0.17.8","affected_versions_present":true,"cve_id":"CVE-2026-106492","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106492","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:48:05.896Z","patch_url":"","primary_source":"","published":"2026-10-06T20:48:05.896Z"},{"affected":"backstage: < 1.54.6; plugin-proxy-backend: < 0.6.17","affected_versions_present":true,"cve_id":"CVE-2026-106491","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106491","fixed":"0.6.17.","last_modified":"2026-10-06T20:45:08.067Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-9ghw-48h5-v2w5","primary_source":"","published":"2026-10-06T20:45:08.067Z"},{"affected":"backstage: < 1.54.6; plugin-techdocs-backend: < 2.2.4","affected_versions_present":true,"cve_id":"CVE-2026-106490","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106490","fixed":"2.2.4.","last_modified":"2026-10-06T20:41:26.668Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-7mfx-xg57-53c9","primary_source":"","published":"2026-10-06T20:41:26.668Z"},{"affected":"backstage: < 1.54.6; plugin-techdocs-backend: < 2.2.4","affected_versions_present":true,"cve_id":"CVE-2026-106489","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106489","fixed":"2.2.4.","last_modified":"2026-10-06T20:39:50.992Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-rg9r-hr7g-5gc2","primary_source":"","published":"2026-10-06T20:39:50.992Z"},{"affected":"backstage: < 1.54.6; plugin-auth-backend-module-oidc-provider: < 0.4.20","affected_versions_present":true,"cve_id":"CVE-2026-106488","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106488","fixed":"0.4.20.","last_modified":"2026-10-06T20:38:18.045Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-826h-28h9-65hg","primary_source":"","published":"2026-10-06T20:38:18.045Z"},{"affected":"backstage: < 1.54.6; plugin-kubernetes-backend: < 0.21.10","affected_versions_present":true,"cve_id":"CVE-2026-106487","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106487","fixed":"0.21.10.","last_modified":"2026-10-06T20:36:45.419Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-h53x-hjx6-25gr","primary_source":"","published":"2026-10-06T20:36:45.419Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend-module-bitbucket-cloud: < 0.3.10; plugin-scaffolder-backend-module-bitbucket-server: < 0.2.25","affected_versions_present":true,"cve_id":"CVE-2026-106486","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106486","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:35:10.380Z","patch_url":"","primary_source":"","published":"2026-10-06T20:35:10.380Z"},{"affected":"backstage: < 1.54.6; plugin-catalog-backend-module-gitlab: < 0.8.7","affected_versions_present":true,"cve_id":"CVE-2026-106463","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106463","fixed":"0.8.7.","last_modified":"2026-10-06T20:32:45.755Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-gp6m-x9vw-5c5x","primary_source":"","published":"2026-10-06T20:32:45.755Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0; plugin-scaffolder-backend-module-azure: < 0.2.25; plugin-scaffolder-backend-module-bitbucket-cloud: < 0.3.10; plugin-scaffolder-backend-module-bitbucket-server: < 0.2.25; plugin-scaffolder-backend-module-github: < 0.9.13; plugin-scaffolder-backend-module-gitlab: < 0.11.10","affected_versions_present":true,"cve_id":"CVE-2026-106462","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106462","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:30:28.855Z","patch_url":"","primary_source":"","published":"2026-10-06T20:30:28.855Z"},{"affected":"backstage: < 1.54.6; plugin-scaffolder-backend: < 4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-106461","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106461","fixed":"4.1.0.","last_modified":"2026-10-06T20:25:32.100Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-7hfw-grcm-cqm6","primary_source":"","published":"2026-10-06T20:25:32.100Z"},{"affected":"backstage: >= 1.18.0, < 1.49.7, >= 1.50.0-next.0, < 1.54.7; plugin-auth-node: >= 0.3.0, < 0.6.15, >= 0.7.0, < 0.7.5","affected_versions_present":true,"cve_id":"CVE-2026-106460","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106460","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:22:31.994Z","patch_url":"","primary_source":"","published":"2026-10-06T20:22:31.994Z"},{"affected":"backstage: >= 1.47.0, < 1.54.8; plugin-scaffolder-backend-module-sentry: >= 0.3.0, < 0.3.8","affected_versions_present":true,"cve_id":"CVE-2026-106459","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106459","fixed":"0.3.8.","last_modified":"2026-10-06T20:19:37.541Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-g734-fhp4-7mfp","primary_source":"","published":"2026-10-06T20:19:37.541Z"},{"affected":"backstage: >= 1.38.0, < 1.55.0; plugin-catalog-backend-module-bitbucket-server: >= 0.4.0, < 0.5.15","affected_versions_present":true,"cve_id":"CVE-2026-106458","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106458","fixed":"0.5.15.","last_modified":"2026-10-06T20:16:12.035Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-c36c-cf6r-ghgj","primary_source":"","published":"2026-10-06T20:16:12.035Z"},{"affected":"backstage: >= 1.26.0, < 1.55.0; plugin-auth-backend-module-cloudflare-access-provider: >= 0.1.0, < 0.5.0","affected_versions_present":true,"cve_id":"CVE-2026-106457","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106457","fixed":"0.5.0.","last_modified":"2026-10-06T20:13:26.801Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-q333-f498-w2x7","primary_source":"","published":"2026-10-06T20:13:26.801Z"},{"affected":"backstage: >= 1.28.0, < 1.55.0; plugin-proxy-backend: >= 0.5.0, < 0.6.18","affected_versions_present":true,"cve_id":"CVE-2026-106456","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106456","fixed":"0.6.18.","last_modified":"2026-10-06T20:10:41.795Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-472h-9c5j-prrr","primary_source":"","published":"2026-10-06T20:10:41.795Z"},{"affected":"backstage: >= 0.71.1, < 1.50.6, >= 1.51.0-next.0, < 1.54.8; plugin-techdocs-node: >= 0.11.12, < 1.14.7, >= 1.15.0, < 1.15.5","affected_versions_present":true,"cve_id":"CVE-2026-106455","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106455","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-06T20:06:06.505Z","patch_url":"","primary_source":"","published":"2026-10-06T20:06:06.505Z"},{"affected":"backstage: < 1.14.6, >= 1.15.0, < 1.15.4","affected_versions_present":true,"cve_id":"CVE-2026-88064","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-88064","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T15:46:46.830Z","patch_url":"","primary_source":"","published":"2026-09-16T14:13:26.950Z"},{"affected":"backstage: < 0.29.2","affected_versions_present":true,"cve_id":"CVE-2026-73563","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73563","fixed":"For more about Ansible plugins for Red Hat Developer Hub, see References links","last_modified":"2026-08-13T18:07:45.624Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-73563","primary_source":"","published":"2026-08-13T17:32:39.535Z"},{"affected":"< 1.14.3","affected_versions_present":true,"cve_id":"CVE-2026-29186","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29186","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T01:10:31.895Z","patch_url":"","primary_source":"","published":"2026-03-07T15:03:51.422Z"},{"affected":"< 3.1.4","affected_versions_present":true,"cve_id":"CVE-2026-29184","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29184","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-09T20:24:16.597Z","patch_url":"","primary_source":"","published":"2026-03-07T15:03:18.226Z"},{"affected":"< 1.20.1","affected_versions_present":true,"cve_id":"CVE-2026-29185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-29185","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-03-09T20:24:16.756Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-95v5-prp4-5gv5","primary_source":"","published":"2026-03-07T15:02:04.986Z"},{"affected":"< 1.13.11; = 1.14.0","affected_versions_present":true,"cve_id":"CVE-2026-25152","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25152","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-02T16:29:27.963Z","patch_url":"","primary_source":"","published":"2026-01-30T21:51:22.277Z"},{"affected":"< 1.13.11; = 1.14.0","affected_versions_present":true,"cve_id":"CVE-2026-25153","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25153","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T01:16:35.622Z","patch_url":"","primary_source":"","published":"2026-01-30T21:31:58.870Z"},{"affected":"< 0.12.2; >= 0.13.0, < 0.13.2; >= 0.14.0, < 0.14.1","affected_versions_present":true,"cve_id":"CVE-2026-24048","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24048","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-01-22T16:48:55.954Z","patch_url":"https://github.com/backstage/backstage/commit/27f9061d24affd1b9212fe0abd476bfc3fbaedcb","primary_source":"","published":"2026-01-21T22:51:44.015Z"},{"affected":"< 0.1.17","affected_versions_present":true,"cve_id":"CVE-2026-24047","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24047","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T16:49:06.720Z","patch_url":"","primary_source":"","published":"2026-01-21T22:45:06.956Z"},{"affected":"@backstage/backend-defaults < 0.12.2; @backstage/backend-defaults >= 0.13.0, < 0.13.2; @backstage/backend-defaults >= 0.14.0, < 0.14.1; @backstage/plugin-scaffolder-backend < 2.2.2; @backstage/plugin-scaffolder-backend >= 3.0.0, < 3.0.2; @backstage/plugin-scaffolder-backend >= 3.1.0, < 3.1.1; @backstage/plugin-scaffolder-node < 0.11.2; @backstage/plugin-scaffolder-node >= 0.12.0, < 0.12.3","affected_versions_present":true,"cve_id":"CVE-2026-24046","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-24046","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T01:17:34.920Z","patch_url":"","primary_source":"","published":"2026-01-21T22:36:30.794Z"},{"affected":"< 2.1.1","affected_versions_present":true,"cve_id":"CVE-2025-55285","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55285","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-08-15T17:49:24.677Z","patch_url":"","primary_source":"","published":"2025-08-15T17:10:26.735Z"},{"affected":"< 0.6.0","affected_versions_present":true,"cve_id":"CVE-2025-32791","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32791","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-04-17T13:11:08.152Z","patch_url":"","primary_source":"","published":"2025-04-16T21:46:23.659Z"},{"affected":"< 0.4.12; = 0.5.0; = 0.6.0","affected_versions_present":true,"cve_id":"CVE-2024-53983","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-53983","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-12-02T22:16:09.994Z","patch_url":"","primary_source":"","published":"2024-11-29T18:53:13.289Z"},{"affected":"< 0.3.75","affected_versions_present":true,"cve_id":"CVE-2024-47762","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47762","fixed":"0.3.75","last_modified":"2024-10-03T17:40:40.551Z","patch_url":"https://github.com/backstage/backstage/security/advisories/GHSA-qc4v-xq2m-65wc","primary_source":"","published":"2024-10-03T17:14:34.529Z"},{"affected":"< 1.26.0","affected_versions_present":true,"cve_id":"CVE-2024-45815","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45815","fixed":"For more about Red Hat Developer Hub, see References links","last_modified":"2024-09-18T14:49:10.507Z","patch_url":"https://access.redhat.com/security/cve/CVE-2024-45815","primary_source":"","published":"2024-09-17T20:14:31.104Z"},{"affected":"< 1.10.13","affected_versions_present":true,"cve_id":"CVE-2024-45816","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-45816","fixed":"For more about Red Hat Developer Hub, see References links","last_modified":"2024-09-18T14:50:20.582Z","patch_url":"https://access.redhat.com/security/cve/CVE-2024-45816","primary_source":"","published":"2024-09-17T20:13:29.331Z"},{"affected":"< 1.10.13","affected_versions_present":true,"cve_id":"CVE-2024-46976","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-46976","fixed":"For more about Red Hat Developer Hub, see References links","last_modified":"2024-09-18T13:47:17.911Z","patch_url":"https://access.redhat.com/security/cve/CVE-2024-46976","primary_source":"","published":"2024-09-17T20:12:35.332Z"},{"affected":"= 0.21.0; < 0.19.10; >= 0.20.0, < 0.20.2","affected_versions_present":true,"cve_id":"CVE-2024-26150","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-26150","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T23:59:32.589Z","patch_url":"https://github.com/backstage/backstage/commit/1ad2b1b61ebb430051f7d804b0cc7ebfe7922b6f","primary_source":"","published":"2024-02-23T15:46:35.731Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"backstage"}}