linuxfoundation backstage/plugin-techdocs-backend vulnerabilities (CVE)

CVE records published for linuxfoundation backstage/plugin-techdocs-backend, newest first. Follow to get an email when a new one appears.

2 results

6.5Medium

CVE-2026-106490 1 month ago

Backstage: Improper input validation in TechDocs static content requests

backstage backstage; @backstage plugin-techdocs-backend

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenti…

6.5Medium

CVE-2026-106489 1 month ago

Backstage: Improper authorization enforcement for TechDocs static content

backstage backstage; @backstage plugin-techdocs-backend

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs docu…