CVE-2026-106563

A flaw was found in the Backstage Kubernetes backend plugin @backstage/plugin-kubernetes-backend. Due to improper entity validation in a deprecated services endpoint, an authenticated user with read permissions can submit crafted entity data. This issue allows unauthorized information disclosure,...