NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-106488 Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is aff... 2026-10-06 8.1 NETWORK HIGH NVD
CVE-2026-106487 Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by unsup... 2026-10-06 3.5 NETWORK LOW NVD
CVE-2026-106486 Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.... 2026-10-06 8.5 NETWORK HIGH NVD
CVE-2026-106463 Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected... 2026-10-06 5.4 NETWORK MEDIUM NVD
CVE-2026-106462 Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intende... 2026-10-06 6.4 NETWORK MEDIUM NVD
CVE-2026-106461 Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorre... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-106460 Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not cons... 2026-10-06 6.8 NETWORK MEDIUM NVD
CVE-2026-106459 Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package ... 2026-10-06 8.5 NETWORK HIGH NVD
CVE-2026-106458 Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server ... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-106457 Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-pro... 2026-10-06 6.8 NETWORK MEDIUM NVD
CVE-2026-106456 Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by inc... 2026-10-06 4.8 NETWORK MEDIUM NVD
CVE-2026-106455 Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is af... 2026-10-06 7.7 NETWORK HIGH NVD
CVE-2026-106062 A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, h... 2026-10-06 7.8 LOCAL HIGH NVD
CVE-2026-106032 Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.... 2026-10-06 5.7 NETWORK MEDIUM NVD
CVE-2026-105812 Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authent... 2026-10-06 9.0 NETWORK CRITICAL NVD