Linuxfoundation Backstage Plugin-catalog-backend vulnerabilities

• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Improper URL validation in catalog entity placeholder resolution CVE-2026-106498 Fix available 7.7 HighOctober 6, 2026
• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent catalog property permission evaluation CVE-2026-106497 4.3 MediumOctober 6, 2026
• @backstage plugin-catalog-backend, backstage, linuxfoundation backstage plugin-catalog-backend +2 more Backstage: Inconsistent enforcement of allowed location types during catalog processing CVE-2026-106496 Fix available 3.1 LowOctober 6, 2026
• backstage, linuxfoundation backstage catalog-model, backstage core-components +1 more +3 more Backstage has XSS Vulnerability in Software Catalog CVE-2023-25571 Fix available 6.8 MediumFebruary 14, 2023