Vulnerabilities in Backstage software