Skip to content
OpenAdvisories

Product · @backstage/plugin-techdocs-node

plugin-techdocs-node

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-106507

    Backstage: TechDocs arbitrary file read via mkdocs snippets

    Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an auth…

    backstage @backstage/plugin-techdocs-node backstage plugin-techdocs-node