@backstage/plugin-techdocs-node plugin-techdocs-node güvenlik açıkları (CVE)

@backstage/plugin-techdocs-node plugin-techdocs-node için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

1 sonuç
5.3Orta
CVE-2026-106507

Backstage: TechDocs arbitrary file read via mkdocs snippets

backstage backstage; @backstage/plugin-techdocs-node plugin-techdocs-node

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an auth…