BA
Product
Backstage/plugin-proxy-backend
by Linuxfoundation · last CVE Oct 6, 2026
2
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add Backstage/plugin-proxy-backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106456
6.5
0%
Oct 6
Backstage: Inconsistent credential enforcement for overlapping proxy routes
Affected: 0.5.0 before 0.6.18
CVE-2026-106491
6.4
0%
Oct 6
Backstage: Improper input validation in proxy-backend
Affected: before 0.6.17
Showing 2