VendorsLinux Foundationbackstage_plugin-catalog-backendall versions
Vulnerabilities

Linux Foundation Backstage Plugin-catalog-backend

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2026-106498
Backstage: Improper URL validation in catalog entity placeholder resolution
Published 2026-10-06 · Analyzed
7.7EPSS 0.003
CVE-2023-25571
Backstage has XSS Vulnerability in Software Catalog
Published 2023-02-14 · Modified
6.8EPSS 0.005
CVE-2026-106496
Backstage: Inconsistent enforcement of allowed location types during catalog processing
Published 2026-10-06 · Analyzed
6.5EPSS 0.002
CVE-2026-106497
Backstage: Inconsistent catalog property permission evaluation
Published 2026-10-06 · Analyzed
4.3EPSS 0.002