CVE-2026-29184
EUVD-2026-1014407.03.2026, 15:15
Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run through task event logs. This issue has been patched in version 3.1.4.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linuxfoundation | \@backstage\/plugin-scaffolder-backend | 𝑥 < 3.1.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration