PL
Product
plugin-auth-backend
by @backstage · last CVE Mar 12, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add plugin-auth-backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32236
7.5
0%
Mar 12
@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch
Affected: < 0.27.1
CVE-2026-32235
4.7
0%
Mar 12
@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass
Affected: < 0.27.1
Showing 2