@backstage plugin-catalog-unprocessed-entities-common

• CVE-2026-44374 Medium 4.3 Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks 0.2%