@backstage/plugin-catalog-unprocessed-entities-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2026-44374

Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks

Backstage is an open framework for building developer portals. Prior to 0.6.11, the unprocessed entities read endpoints in @backstage/plugin-catalog-backend-module-unprocessed do not enforce permission authorization checks. Any authenticated user can access u…

backstage plugin-catalog-unprocessed-entities plugin-catalog-backend-module-unprocessed plugin-catalog-unprocessed-entities-common npm

May 14, 2026