@backstage backend-defaults

• CVE-2026-106495 Medium 4.3 Backstage: Improper access control in backend action invocation 0.2%
• CVE-2026-106494 Medium 4.4 Backstage: Improper input validation in cloud storage URL readers 0.3%
• CVE-2026-106492 High 7.6 Backstage: Improper preservation of access restrictions during service credential delegation 0.2%