@backstage plugin-techdocs-node güvenlik açıkları (CVE)

@backstage plugin-techdocs-node için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

8 sonuç
8.8Yüksek
CVE-2026-106558

Backstage: Improper validation of TechDocs MkDocs configuration

backstage backstage; @backstage plugin-techdocs-node

Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdown_extensions configuration. An authenticated attacker who can register or …

7.7Yüksek
CVE-2026-106556

Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization

backstage backstage; @backstage plugin-techdocs-node

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by configuration bypass in techdocs mkdocs.yml sanitization. Insufficient validation of MkDocs configuration during TechDoc…

5.3Orta
CVE-2026-106508

Backstage: Potential file exposure through local TechDocs publisher

backstage backstage; @backstage plugin-techdocs-node

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local techdocs publisher. When using the local TechDocs publisher (techdocs.publisher.ty…