@backstage plugin-proxy-backend vulnerabilities (CVE)

CVE records published for @backstage plugin-proxy-backend, newest first. Follow to get an email when a new one appears.

2 results
6.4Medium
CVE-2026-106491

Backstage: Improper input validation in proxy-backend

backstage backstage; @backstage plugin-proxy-backend

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the pr…