Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-techdocs-backend

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-106490

    Backstage: Improper input validation in TechDocs static content requests

    Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenti…

    backstage backstage plugin-techdocs-backend @backstage/plugin-techdocs-backend npm
  • Medium 6.5
    CVE-2026-106489

    Backstage: Improper authorization enforcement for TechDocs static content

    Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs docu…

    backstage backstage plugin-techdocs-backend @backstage/plugin-techdocs-backend npm
  • Medium 6.5
    CVE-2024-45816

    Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend

    Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessibl…

    backstage backstage @backstage/plugin-techdocs-backend npm
  • Medium 6.5
    CVE-2024-46976

    Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend

    Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content that will be executed in the victim's browser when browsing do…

    backstage backstage @backstage/plugin-techdocs-backend npm