Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/02 8:19 p.m.12 views

GHSA-6JR7-99PF-8VGF @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Impact When TechDocs is configured with runIn: local, a malicious actor who can submit or modify a repository's mkdocs.yml file can execute arbitrary Python code on the TechDocs build server via MkDocs hooks configuration. Patches Upgrade to @backstage/plugin-techdocs-node version 1.13.11, 1.14.1...

7.7CVSS6AI score0.00541EPSS
SaveExploits0References3
Rows per page
Query Builder