Skip to content

Linuxfoundation Backstage\/plugin-catalog-unprocessed-entities vulnerabilities

@backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 moreBackstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checksCVE-2026-44374Fix available4.3 MediumMay 6, 2026