Skip to content
Linuxfoundation Backstage Plugin-techdocs-node vulnerabilities
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of TechDocs MkDocs configuration
CVE-2026-106558
Fix available
8.8 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization
CVE-2026-106556
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
CVE-2026-106510
Fix available
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of MkDocs theme configuration in TechDocs
CVE-2026-106509
Fix available
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Potential file exposure through local TechDocs publisher
CVE-2026-106508
Fix available
5.3 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: TechDocs arbitrary file read via mkdocs snippets
CVE-2026-106507
5.3 Medium
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
CVE-2026-106505
Fix available
7.7 High
-
@backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more
Backstage: Improper validation of MkDocs plugin configuration in TechDocs
CVE-2026-106455
Fix available
7.7 High
-
backstage, linuxfoundation backstage plugin-techdocs-node +1 more
Backstage: Improper input validation in TechDocs MkDocs configuration
CVE-2026-88064
8.8 High
-
backstage, linuxfoundation backstage plugin-techdocs-node, red hat developer hub 1.8 +2 more +4 more
@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
CVE-2026-29186
Fix available
7.7 High