Product

backstage plugin-catalog-backend-module-bitbucket-server vulnerabilities

1 published CVE affecting backstage plugin-catalog-backend-module-bitbucket-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest backstage plugin-catalog-backend-module-bitbucket-server CVEs

Newest publication first

CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates
Published 2026-10-06

MediumCVSS 6.5 EPSS 0.27%

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

backstage plugin-catalog-backend-module-bitbucket-server vulnerabilities

Latest backstage plugin-catalog-backend-module-bitbucket-server CVEs

CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates