BP
Product
Backstage Plugin-techdocs-node
10
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 1High 7Medium 2Low 0
Watch
Add Backstage Plugin-techdocs-node to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29186 | 9.8 | Mar 7 | Backstage is an open framework for building developer portals Affected: before 1.14.3 |
| CVE-2026-106558 | 8.8 | Oct 7 | Backstage: Improper validation of TechDocs MkDocs configuration Affected: before 1.14.8; 1.15.0 before 1.15.6; 2.0.0 before 2.0.1 |
| CVE-2026-106509 | 8.8 | Oct 6 | Backstage: Improper validation of MkDocs theme configuration in TechDocs Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-88064 | 8.8 | Sep 16 | Backstage: Improper input validation in TechDocs MkDocs configuration Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-106505 | 8.5 | Oct 6 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-106556 | 7.7 | Oct 7 | Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-106510 | 7.7 | Oct 7 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml Affected: before 1.14.6; 1.15.0 before 1.15.4 |
| CVE-2026-106455 | 7.7 | Oct 6 | Backstage: Improper validation of MkDocs plugin configuration in TechDocs Affected: 0.11.12 before 1.14.7; 1.15.0 before 1.15.5 |
| CVE-2026-106508 | 6.5 | Oct 6 | Backstage: Potential file exposure through local TechDocs publisher Affected: before 1.15.4 |
| CVE-2026-106507 | 6.5 | Oct 6 | Backstage: TechDocs arbitrary file read via mkdocs snippets Affected: before 1.15.4 |
Showing 10