Vendor
backstage
Avg CVSS5.8
CVEs in the catalog
29
since 2021-06
Months in the top 100
3
months with a stored rank
Best rank
#40
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| backstage | 25 | 86% |
| red hat developer hub 1 8 | 3 | 10% |
| red hat developer hub 1 9 | 3 | 10% |
| plugin auth backend | 2 | 7% |
| self service automation portal 2 | 2 | 7% |
| plugin catalog backend module unprocessed | 1 | 3% |
| plugin catalog unprocessed entities | 1 | 3% |
| plugin catalog unprocessed entities common | 1 | 3% |
| plugin scaffolder backend | 1 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-22 | 7 | 24% |
| CWE-918 | 3 | 10% |
| CWE-532 | 2 | 7% |
| CWE-59 | 2 | 7% |
| CWE-601 | 2 | 7% |
| CWE-77 | 2 | 7% |
| CWE-79 | 2 | 7% |
| CWE-94 | 2 | 7% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | CVSS | Published |
|---|---|---|---|
| CVE-2026-73563 | CWE-601 | 4.7 | 2026-08-13 |
| CVE-2026-44374 | CWE-863 | 4.3 | 2026-05-14 |
| CVE-2026-32237 | CWE-200 | 4.4 | 2026-03-12 |
| CVE-2026-32236 | CWE-918 | 1.7 | 2026-03-12 |
| CVE-2026-32235 | CWE-601 | 5.9 | 2026-03-12 |
| CVE-2026-29186 | CWE-434, CWE-74 | 7.7 | 2026-03-07 |
| CVE-2026-29184 | CWE-532 | 2 | 2026-03-07 |
| CVE-2026-29185 | CWE-22 | 2.7 | 2026-03-07 |
| CVE-2026-25152 | CWE-22 | 5.3 | 2026-01-30 |
| CVE-2026-25153 | CWE-94 | 7.7 | 2026-01-30 |
| CVE-2026-24048 | CWE-918 | 3.5 | 2026-01-21 |
| CVE-2026-24047 | CWE-59, CWE-61 | 6.3 | 2026-01-21 |
| CVE-2026-24046 | CWE-22, CWE-59 | 7.1 | 2026-01-21 |
| CVE-2025-55285 | CWE-532 | 2.6 | 2025-08-15 |
| CVE-2025-32791 | CWE-213 | 4.3 | 2025-04-16 |