@backstage Plugin-catalog-unprocessed-entities vulnerabilities

• @backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 more Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks CVE-2026-44374 Fix available 4.3 MediumMay 6, 2026