{"uuid": "3ed01bd9-7603-4442-b05e-911c152e729a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106561", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxe4tzgp3l2w", "content": "CVE-2026-106561 affects the Backstage @backstage/plugin-kubernetes-backend package before 0.21.9. An authenticated user with standard Kubernetes read permission could retrieve masked sensitive values, including credentials. Fixed in 0.21.9.", "creation_timestamp": "2026-10-08T09:17:39.067302Z"}