Skip to content
OpenAdvisories

Package · npm

@backstage/plugin-techdocs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2021-32661

    TechDocs object element script injection

    Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin (`@backstage/plugin-techdocs`) prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding…

    backstage backstage @backstage/plugin-techdocs npm