plugin-auth-backend-module-cloudflare-access-provider vulnerabilities

CVEs whose affected-version data names the plugin-auth-backend-module-cloudflare-access-provider package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106457Medium· 6.8

4w ago

Backstage is an open framework for building developer portals

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by insufficient audience validation in the cloudflare access …

▾ Sunlitbackstage · backstageEPSS 0.28%via NVD