package

npm/@backstage/plugin-auth-backend

pkg:npm/%40backstage/plugin-auth-backend

MEDIUM4.7npm

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

Modified: 8/13/2026

LOWnpm

@backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch

Modified: 4/15/2026

HIGH7.4npm

Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend

Modified: 5/4/2026

MEDIUM5.9npm

@backstage/plugin-auth-backend: OAuth redirect URI allowlist bypass

Modified: 3/14/2026