CVE-2026-32236 @backstage/plugin-auth-backend: SSRF in experimental CIMD metadata fetch

Backstage is an open framework for building developer portals. Prior to 0.27.1, a Server-Side Request Forgery SSRF vulnerability exists in @backstage/plugin-auth-backend when auth.experimentalClientIdMetadataDocuments.enabled is set to true. The CIMD metadata fetch validates the initial clientid...

@backstage/plugin-auth-backend-module-aws-alb-provider (0.4.13-next.1), @backstage/plugin-auth-backend-module-oidc-provider (0.4.13-next.1) potentially affected by CVE-2026-32236 via @backstage/plugin-auth-backend (0.27.0-next.1)

@backstage/plugin-auth-backend NPM version 0.27.0-next.1 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-auth-backend and may be impacted: - @backstage/plugin-auth-backend-module-aws-alb-provider 0.4.13-next.1 -...

@backstage/plugin-auth-backend (>=0.0.0-nightly-20240122021809, <=0.22.11), @backstage/plugin-auth-backend-module-aws-alb-provider (>=0.0.0-nightly-20240126021148, <=0.4.13-next.1) +11 more potentially affected by CVE-2026-32236 via @backstage/plugin-auth-backend (>=0.0.0-nightly-20240929023448, <=0.27.0-next.1)

@backstage/plugin-auth-backend NPM version =0.0.0-nightly-20240929023448, =0.0.0-nightly-20240122021809, =0.0.0-nightly-20240126021148, =0.0.0-nightly-20240122021809, =0.0.0-nightly-202201422556, =0.0.0-nightly-202111222339, =0.0.0-nightly-2021102522541, =0.0.0-nightly-20220203021748, =1.0.0,...