Plugin-proxy-backend (Backstage) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Backstage.

CVEs of Plugin-proxy-backend

• CVE-2026-106491 - CVSS 6.4 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input…
• CVE-2026-106456 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by…