Lucene search
+L

2 matches found

OSV
OSV
added 2026/03/05 12:12 a.m.6 views

GHSA-928R-FM4V-MVRW TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

Impact This is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an...

7.7CVSS6.2AI score0.00782EPSS
SaveExploits0References6
Rows per page
Query Builder