Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@backstage/plugin-techdocs-backend

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
npm

Advisories 4

  • CVE-2026-106490Medium 6.5

    Backstage: Improper input validation in TechDocs static content requests

    Affected: fixed in 2.2.4.

  • CVE-2026-106489Medium 6.5

    Backstage: Improper authorization enforcement for TechDocs static content

    Affected: fixed in 2.2.4.

  • CVE-2024-45816Medium 6.5

    Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend

    Affected: fixed in 1.10.13.

  • CVE-2024-46976Medium 6.5

    Circumvention of cross site scripting Protection in @backstage/plugin-techdocs-backend

    Affected: fixed in 1.10.13.