Skip to content
OpenAdvisories

Product · backstage

plugin-proxy-backend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-106491

    Backstage: Improper input validation in proxy-backend

    Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the pr…

    backstage backstage plugin-proxy-backend @backstage/plugin-proxy-backend npm
  • Medium 4.8
    CVE-2026-106456

    Backstage: Inconsistent credential enforcement for overlapping proxy routes

    Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by inconsistent credential enforcement for overlapping proxy routes. An operator can configure overlapping proxy pa…

    backstage backstage plugin-proxy-backend @backstage/plugin-proxy-backend npm