VYPR

@backstage/plugin-techdocs-node

by Backstage

CVEs (1)

  • CVE-2026-88064HigSep 16, 2026
    risk 0.50cvss 8.8epss

    Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mkdocs.yml supplied by an authenticated user who can register or modify a TechDocs source. Unsafe…