@backstage plugin-scaffolder-backend-module-gitlab

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-106462Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallbackMEDIUM 6.40.2 %