Vulnerabilities
Summary — last 7 days
New vulnerabilities5,112▲ 1,960 vs. last week
Critical / high2,827▲ 1,289 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)197▼ 10 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Medium (6.5) | 0.22% | — | Linuxfoundation Backstage/plugin-kubernetes-backendLinuxfoundation Backstage | 10/7/2026 | 10/16/2026 | Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprecated kubernetes services endpoint. An authenticated user with Kubernetes read permissions could access Kubernetes workload data beyond… | |
| Analyzed | Medium (5) | 0.20% | — | Linuxfoundation Backstage/plugin-kubernetes-backendLinuxfoundation Backstage | 10/7/2026 | 10/16/2026 | Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holding the standard Kubernetes resource read permission could retrieve sensitive values… |