What’s Vulnerable › Products

Linuxfoundation Backstage Plugin-Catalog-Backend vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Linuxfoundation Backstage Plugin-Catalog-Backend version is affected

Latest Linuxfoundation Backstage Plugin-Catalog-Backend vulnerabilities

• CVE-2026-106498 — Backstage: Improper URL validation in catalog entity placeholder resolution (CVSS 7.7)
• CVE-2026-106497 — Backstage: Inconsistent catalog property permission evaluation (CVSS 4.3)
• CVE-2026-106496 — Backstage: Inconsistent enforcement of allowed location types during catalog processing (CVSS 6.5)
• CVE-2023-25571 — Backstage has XSS Vulnerability in Software Catalog (CVSS 5.4)