@backstage plugin-catalog-backend-module-unprocessed

• CVE-2026-44374 Medium 4.3 Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks 0.2%