NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-106505 Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by ... 2026-10-06 7.7 NETWORK HIGH NVD
CVE-2026-106504 Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensiti... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-106503 Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend packag... 2026-10-06 8.1 NETWORK HIGH NVD
CVE-2026-106502 Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive... 2026-10-06 5.3 NETWORK MEDIUM NVD
CVE-2026-106501 Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend packag... 2026-10-06 9.6 NETWORK CRITICAL NVD
CVE-2026-106500 Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend packag... 2026-10-06 8.5 NETWORK HIGH NVD
CVE-2026-106499 Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-de... 2026-10-06 4.9 NETWORK MEDIUM NVD
CVE-2026-106498 Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend pa... 2026-10-06 7.7 NETWORK HIGH NVD
CVE-2026-106497 Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsiste... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-106496 Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsiste... 2026-10-06 3.1 NETWORK LOW NVD
CVE-2026-105268 The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}`) also accepted attachments that belon... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-105267 The Gitea web route for deleting tags (`POST /{owner}/{repo}/tags/delete`) requires only write access to the Code unit, but shares its handler with re... 2026-10-06 8.1 NETWORK HIGH NVD
CVE-2026-104633 When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated do... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-101023 Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a ... 2026-10-06 9.1 NETWORK CRITICAL NVD
CVE-2026-43598 Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to... 2026-10-06 7.7 NETWORK HIGH NVD