VendorsLinux Foundationbackstage_plugin-techdocs-nodeany version
Vulnerabilities

Linux Foundation Backstage Plugin-techdocs-node any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

10CVEs
CVE-2026-29186
@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Published 2026-03-07 · Modified
9.8EPSS 0.009
CVE-2026-88064
Backstage: Improper input validation in TechDocs MkDocs configuration
Published 2026-09-16 · Analyzed
8.8EPSS 0.012
CVE-2026-106509
Backstage: Improper validation of MkDocs theme configuration in TechDocs
Published 2026-10-06 · Analyzed
8.8EPSS 0.005
CVE-2026-106558
Backstage: Improper validation of TechDocs MkDocs configuration
Published 2026-10-07 · Analyzed
8.8EPSS 0.005
CVE-2026-106505
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
Published 2026-10-06 · Analyzed
8.5EPSS 0.003
CVE-2026-106510
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
Published 2026-10-07 · Analyzed
7.7EPSS 0.005
CVE-2026-106455
Backstage: Improper validation of MkDocs plugin configuration in TechDocs
Published 2026-10-06 · Analyzed
7.7EPSS 0.004
CVE-2026-106556
Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
Published 2026-10-07 · Analyzed
7.7EPSS 0.003
CVE-2026-106507
Backstage: TechDocs arbitrary file read via mkdocs snippets
Published 2026-10-06 · Analyzed
6.5EPSS 0.004
CVE-2026-106508
Backstage: Potential file exposure through local TechDocs publisher
Published 2026-10-06 · Analyzed
6.5EPSS 0.004