@backstage/plugin-auth-backend vulnerabilities (Root)

2 vulnerabilities.

• @backstage/plugin-auth-backend Root @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch CVE-2026-32236 Fix available 1.7 LowMarch 12, 2026
• @backstage/plugin-auth-backend Root @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass CVE-2026-32235 Fix available 5.9 MediumMarch 12, 2026