Skip to content
OpenAdvisories

Package · npm

@backstage/techdocs-common

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-4jqc-jvh2-pxg9

    Path traversal for local publishers in TechDocs backend

    ### Impact A malicious actor with the ability to register entities in the Software Catalog is able to write files to arbitrary paths on the techdocs backend host instance when `techdocs.publisher.type` is set to `local`. This vulnerability is mitigated by the…

    @backstage/plugin-techdocs-node @backstage/techdocs-common npm
  • Medium 6.5
    CVE-2021-32662

    TechDocs mkdocs.yml path traversal

    Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In `@backstage/techdocs-common` versions prior to 0.6.3, a malicious actor could read sensitive files from the environm…

    backstage backstage @backstage/techdocs-common npm
  • Medium 6.8
    CVE-2021-32660

    TechDocs content sanitization bypass

    Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In versions of `@backstage/tehdocs-common` prior to 0.6.4, a malicious internal actor is able to upload documentation c…

    backstage backstage @backstage/techdocs-common npm