plugin-kubernetes-backend

2 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-106563

  Backstage: Improper entity validation in deprecated Kubernetes services endpoint

  Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprecated kubernetes services endpoint. An authenticated user with Kubernetes read p…

  backstage backstage plugin-kubernetes-backend @backstage/plugin-kubernetes-backend npm
  Oct 7, 2026
• Medium 5.0
  CVE-2026-106561

  Backstage: Sensitive information disclosure in Kubernetes resource queries

  Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holding the standard Kuberne…

  backstage backstage plugin-kubernetes-backend @backstage/plugin-kubernetes-backend npm
  Oct 7, 2026