@backstage/plugin-scaffolder-node (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @backstage/plugin-scaffolder-node, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2026-24046 — CVSS 7.1 (high): Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable…
• CVE-2024-53983 — CVSS 5.4 (medium): The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in…