Plugin-auth-backend (Backstage) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-12. Vendor: Backstage.

CVEs of Plugin-auth-backend

• CVE-2026-32236 - CVSS 7.5 (high), 2026-03-12: Backstage is an open framework for building developer portals. Prior to 0.27.1, a Server-Side Request Forgery (SSRF) vulnerability exists in…
• CVE-2026-32235 - CVSS 5.9 (medium), 2026-03-12: Backstage is an open framework for building developer portals. Prior to 0.27.1, the experimental OIDC provider in @backstage/plugin-auth-backend is vulnerable…