Linuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-cloud — known CVE vulnerabilities

Every CVE whose affected-product data names Linuxfoundation Backstage/plugin-scaffolder-backend-module-bitbucket-cloud, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-106486 — CVSS 8.5 (high): Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-clou…
• CVE-2026-106462 — CVSS 6.4 (medium): Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently…