{"action":"Upgrade @backstage/plugin-scaffolder-backend-module-sentry to 0.3.8 or later.","affected":[{"fixed":"0.3.8","introduced":"0.3.0"}],"component":"@backstage/plugin-scaffolder-backend-module-sentry","cve_ids":["CVE-2026-106459"],"ecosystem":"npm","epss":0.00212,"exploited":false,"fixed_versions":["0.3.8"],"ghsa_id":"GHSA-g734-fhp4-7mfp","id":"tcs_01M5KFQE8F7X799QJZHPEZMDTK","modified_at":"2026-10-07T20:30:04.846929529Z","published_at":"2026-10-07T20:25:01Z","references":["https://osv.dev/vulnerability/GHSA-g734-fhp4-7mfp","https://github.com/backstage/backstage/security/advisories/GHSA-g734-fhp4-7mfp","https://nvd.nist.gov/vuln/detail/CVE-2026-106459","https://github.com/backstage/backstage/commit/b0170fad7962fb8c3d71366b5265cf283c7bbcf7","https://github.com/backstage/backstage","https://github.com/backstage/backstage/releases/tag/v1.54.8","https://github.com/backstage/backstage/releases/tag/v1.55.0"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-g734-fhp4-7mfp","url":"https://osv.dev/vulnerability/GHSA-g734-fhp4-7mfp"}],"summary":"Backstage: Improper input validation in Sentry scaffolder actions"}