@backstage Plugin-auth-backend vulnerabilities

• @backstage plugin-auth-backend-module-oidc-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-oidc-provider +2 more Backstage: Improper authentication in the OIDC provider CVE-2026-106488 Fix available 8.1 HighOctober 6, 2026
• @backstage plugin-auth-backend-module-cloudflare-access-provider, backstage, linuxfoundation backstage\/plugin-auth-backend-module-cloudflare-access-provider +2 more Backstage: Insufficient audience validation in the Cloudflare Access auth provider CVE-2026-106457 Fix available 6.8 MediumOctober 6, 2026
• @backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch CVE-2026-32236 Fix available 1.7 LowMarch 12, 2026
• @backstage plugin-auth-backend, linuxfoundation backstage +1 more @backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass CVE-2026-32235 Fix available 5.9 MediumMarch 12, 2026