Plugin-Auth-Backend-Module-Oidc-Provider (< 0.4.20)

A vulnerability in the Backstage OIDC authentication module allows authenticated users to spoof identities when using email-based resolution with unverified email providers, leading to unauthorized access.