{"id":"GHSA-75qf-886x-5xf2","revision":"01ff81bb298643ddaa7034923c06236d","records":[{"revision":"01ff81bb298643ddaa7034923c06236d","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-75qf-886x-5xf2","aliases":["CVE-2026-106559"],"title":"Backstage: Improper input validation in Confluence to Markdown scaffolder module","description":"### Impact\n\nInsufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content.\n\n### Patches\n\nPatched in `@backstage/plugin-scaffolder-backend-module-confluence-to-markdown` version `0.3.25`\n\n### Workarounds\n\nIf unable to update immediately:\n\n- Restrict Confluence edit access to trusted users.\n- Review Confluence page content before running scaffolder templates against untrusted pages.","state":0,"publishedAt":"2026-10-07T18:03:06+00:00","modifiedAt":"2026-10-07T18:15:12.7604293+00:00","affected":[{"ecosystem":"npm","name":"@backstage/plugin-scaffolder-backend-module-confluence-to-markdown","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.3.25"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/backstage/backstage/security/advisories/GHSA-75qf-886x-5xf2","https://nvd.nist.gov/vuln/detail/CVE-2026-106559","https://github.com/backstage/backstage/commit/506c2c11bce3ed9d1f8f50de5d6474b16e43a65e","https://github.com/backstage/backstage","https://github.com/backstage/backstage/releases/tag/v1.54.6"],"sourceUrl":"https://github.com/advisories/GHSA-75qf-886x-5xf2","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-75qf-886x-5xf2","identifiers":["GHSA-75qf-886x-5xf2","CVE-2026-106559"]},"retained":false,"historicalAffected":[]}],"coverage":[]}