CVE-2026-106559

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25

Description Improper input validation in the Confluence to Markdown scaffolder module allows an attacker to influence file write operations during template execution. This occurs when a user runs a template that processes Confluence content influenced by an attacker.

Recommendations Update @backstage/plugin-scaffolder-backend-module-confluence-to-markdown to version 0.3.25. Restrict Confluence edit access to trusted users. Review Confluence page content before running scaffolder templates against untrusted pages.