Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/01/30 9:31 p.m.24 views

CVE-2026-25153 @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with runIn: local, a malicious actor who...

7.7CVSS0.00541EPSS
SaveExploits0References1
Rows per page
Query Builder