VYPR

@backstage/plugin-auth-backend-module-oidc-provider

by Backstage

CVEs (1)

  • CVE-2026-106488HigOct 6, 2026
    risk 0.46cvss 8.1epss —

    Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider…