p PatchFirst

PatchFirst · Latest vulnerabilities

@backstage/plugin-catalog-backend-module-bitbucket-server vulnerabilities

Vulnerability published for @backstage/plugin-catalog-backend-module-bitbucket-server in the last 30 days: 1. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-106458

    Medium · CVSS 6.5EPSS 0.27%Fix available

    Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

    Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a filtered-out repository that remains readable by the configured Backstage integration can trigger a legitimate repos

    • Update to 0.5.15
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →