What’s Vulnerable › Products
Linuxfoundation Backstage Plugin-Techdocs-Node vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your Linuxfoundation Backstage Plugin-Techdocs-Node version is affected
Latest Linuxfoundation Backstage Plugin-Techdocs-Node vulnerabilities
- CVE-2026-106558 — Backstage: Improper validation of TechDocs MkDocs configuration (CVSS 8.8)
- CVE-2026-106556 — Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization (CVSS 7.7)
- CVE-2026-106510 — Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml (CVSS 7.7)
- CVE-2026-106509 — Backstage: Improper validation of MkDocs theme configuration in TechDocs (CVSS 8.8)
- CVE-2026-106508 — Backstage: Potential file exposure through local TechDocs publisher (CVSS 6.5)
- CVE-2026-106507 — Backstage: TechDocs arbitrary file read via mkdocs snippets (CVSS 6.5)
- CVE-2026-106505 — Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend (CVSS 8.5)
- CVE-2026-106455 — Backstage: Improper validation of MkDocs plugin configuration in TechDocs (CVSS 7.7)
- CVE-2026-88064 — Backstage: Improper input validation in TechDocs MkDocs configuration (CVSS 8.8)
- CVE-2026-29186 — @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution (CVSS 9.8)