VYPR

@backstage/plugin-search-backend-module-elasticsearch

by Backstage

CVEs (1)

  • CVE-2026-106562MedOct 7, 2026
    risk 0.21cvss 4.3epss —

    Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated…