PL
Product
plugin-proxy-backend
by @backstage · last CVE Oct 6, 2026
2
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add plugin-proxy-backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106456
6.5
0%
Oct 6
Backstage: Inconsistent credential enforcement for overlapping proxy routes
Affected: >= 0.5.0, < 0.6.18
CVE-2026-106491
6.4
0%
Oct 6
Backstage: Improper input validation in proxy-backend
Affected: < 0.6.17
Showing 2