Mmastodon TechnologyCybersecurity first seen 4 h ago, last 4 h ago, peak #10

Medium-severity vulnerability disclosed in Backstage plugin-proxy-backend

Original: 🚨 EUVD-2026-93989 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: plugin-proxy-backend, backstage 🏢 Vendor: @ backstage , backsta

A new vulnerability, EUVD-2026-93989, has been disclosed affecting the @backstage/plugin-proxy-backend package, part of Backstage, the open-source framework for building developer portals. Versions from 0.5.0 until 0.6.18 are affected. The flaw carries a CVSS v3.1 score of 4.8 out of 10, marking it as a medium-severity issue, and was updated in the EUVD database on 2026-10-06.

Why now: Organisations running Backstage developer portals are checking whether their plugin-proxy-backend versions are within the affected range.

Backstageplugin-proxy-backendEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-93989 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: plugin-proxy-backend, backstage 🏢 Vendor: @ backstage , backstage 📅 Updated: 2026-10-06 📝 Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @ backstage /plugin-proxy-backend… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1286222