CVE-2026-106493
3 advisories.
npm/@backstage/plugin-catalog-backend-module-azure CVE-2026-106493: low 3, EPSS 0.28%
Backstage: Cloud storage catalog locations may cross configured storage boundaries
Action: Upgrade @backstage/plugin-catalog-backend-module-azure to 0.3.21 or later.
npm i @backstage/plugin-catalog-backend-module-azure@0.3.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.21 | - |
Fixed versions
| 0.3.21 |
Sources
- osv: GHSA-xvh9-35w9-42m4
- https://github.com/backstage/backstage/security/advisories/GHSA-xvh9-35w9-42m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-106493
- https://github.com/backstage/backstage/commit/47ddbd8b4a3efd812309f759c38f4877fbd9e5ff
- https://github.com/backstage/backstage
- https://github.com/backstage/backstage/releases/tag/v1.54.6
CVE-2026-106493 · published · modified · JSON
npm/@backstage/plugin-catalog-backend-module-aws CVE-2026-106493: low 3, EPSS 0.28%
Backstage: Cloud storage catalog locations may cross configured storage boundaries
Action: Upgrade @backstage/plugin-catalog-backend-module-aws to 0.4.27 or later.
npm i @backstage/plugin-catalog-backend-module-aws@0.4.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.27 | - |
Fixed versions
| 0.4.27 |
Sources
- osv: GHSA-xvh9-35w9-42m4#npm/@backstage/plugin-catalog-backend-module-aws
- https://github.com/backstage/backstage/security/advisories/GHSA-xvh9-35w9-42m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-106493
- https://github.com/backstage/backstage/commit/47ddbd8b4a3efd812309f759c38f4877fbd9e5ff
- https://github.com/backstage/backstage
- https://github.com/backstage/backstage/releases/tag/v1.54.6
CVE-2026-106493 · published · modified · JSON
npm/@backstage/backend-defaults CVE-2026-106493: low 3, EPSS 0.28%
Backstage: Cloud storage catalog locations may cross configured storage boundaries
Action: Upgrade @backstage/backend-defaults to 0.17.8 or later.
npm i @backstage/backend-defaults@0.17.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.8 | - |
Fixed versions
| 0.17.8 |
Sources
- osv: GHSA-xvh9-35w9-42m4#npm/@backstage/backend-defaults
- https://github.com/backstage/backstage/security/advisories/GHSA-xvh9-35w9-42m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-106493
- https://github.com/backstage/backstage/commit/47ddbd8b4a3efd812309f759c38f4877fbd9e5ff
- https://github.com/backstage/backstage
- https://github.com/backstage/backstage/releases/tag/v1.54.6
CVE-2026-106493 · published · modified · JSON