@backstage/plugin-techdocs-node vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-106455High@backstage/plugin-techdocs-node: Backstage: Improper validation of MkDocs plugin configuration in TechDocs CVE-2026-106510High@backstage/plugin-techdocs-node: Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml CVE-2026-106558High@backstage/plugin-techdocs-node: Backstage: Improper validation of TechDocs MkDocs configuration CVE-2026-106505High@backstage/plugin-techdocs-node: Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend CVE-2026-106508Medium@backstage/plugin-techdocs-node: Backstage has potential file exposure through local TechDocs publisher CVE-2026-106509High@backstage/plugin-techdocs-node: Backstage: Improper validation of MkDocs theme configuration in TechDocs CVE-2026-106557High@backstage/plugin-techdocs-node: Backstage has improper input validation in TechDocs Markdown extension configuration CVE-2026-29186High@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution CVE-2026-25153High@backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks CVE-2026-25152Medium@backstage/plugin-techdocs-node: @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator GHSA-4JQC-JVH2-PXG9Medium@backstage/plugin-techdocs-node: Path traversal for local publishers in TechDocs backend

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo