@backstage plugin-catalog-backend

• CVE-2026-106498 High 7.7 Backstage: Improper URL validation in catalog entity placeholder resolution 0.3%
• CVE-2026-106497 Medium 4.3 Backstage: Inconsistent catalog property permission evaluation 0.2%
• CVE-2026-106496 Low 3.1 Backstage: Inconsistent enforcement of allowed location types during catalog processing 0.2%