@backstage plugin-proxy-backend vulnerabilities

2 published CVEs name @backstage plugin-proxy-backend among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 0Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-106491
Backstage: Improper input validation in proxy-backend
backstage · backstage
Medium6.4
CVE-2026-106456
Backstage: Inconsistent credential enforcement for overlapping proxy routes
backstage · backstage
Medium4.8

Most common weaknesses