Product · backstage

plugin-techdocs-backend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2026-106490

Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenti…

backstage backstage plugin-techdocs-backend @backstage/plugin-techdocs-backend npm

Oct 6, 2026
Medium 6.5

CVE-2026-106489

Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs docu…

backstage backstage plugin-techdocs-backend @backstage/plugin-techdocs-backend npm

Oct 6, 2026