@backstage plugin-catalog-backend vulnerabilities

3 published CVEs name @backstage plugin-catalog-backend among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 1Not scored 0

Newest CVEs

CVE-2026-106498
Backstage: Improper URL validation in catalog entity placeholder resolution
backstage · backstage
High7.7
CVE-2026-106497
Backstage: Inconsistent catalog property permission evaluation
backstage · backstage
Medium4.3
CVE-2026-106496
Backstage: Inconsistent enforcement of allowed location types during catalog processing
backstage · backstage
Low3.1

Most common weaknesses