@backstage/plugin-proxy-backend vulnerabilities (npm)

2 vulnerabilities.

• @backstage/plugin-proxy-backend npm Backstage: Improper input validation in proxy-backend CVE-2026-106491 Fix available 6.4 MediumOctober 6, 2026
• @backstage/plugin-proxy-backend npm Backstage: Inconsistent credential enforcement for overlapping proxy routes CVE-2026-106456 Fix available 4.8 MediumOctober 6, 2026