backstage/plugin-kubernetes-backend vulnerabilities
CVEs whose affected-version data names the backstage/plugin-kubernetes-backend package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-106563Medium· 5.3Backstage is an open framework for building developer portals
Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprecated kubernetes services endpoint. An authenticated user …
▾ Sunlitlinuxfoundation · backstage/plugin-kubernetes-backendEPSS 0.22%via NVD
CVE-2026-106561Medium· 5.0Backstage is an open framework for building developer portals
Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holdin…
▾ Sunlitlinuxfoundation · backstage/plugin-kubernetes-backendEPSS 0.20%via NVD