plugin-search-backend vulnerabilities

CVEs whose affected-version data names the plugin-search-backend package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106562Medium· 4.3

today

Backstage is an open framework for building developer portals

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documen…

▾ Sunlitbackstage · backstagevia NVD