OSIB

OWASP Base d'informations ouverte sur la sécurité OSIB Page du projet : https://owasp.org/www-project-open-security-information-base Dépôt logiciel : https://github.com/OWASP/OSIB Outils fournis : mkdocsmacroosib.py module python installable manuellement osibmacro.py macro à copier qui importe le...

CyberClass

CyberClass يحتوي هذا المستودع على موارد تعليمية لـ Class'Code CyberClass. شجرة الملفات 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo, favicon, etc ...

mas-website

موقع مشروع OWASP لأمن التطبيقات المحمولة يحتوي هذا المستودع على المصدر والتكوين لـ موقع مشروع OWASP لأمن التطبيقات المحمولة mas.owasp.org. يقوم هذا الموقع بتجميع وتنظيم وعرض التوثيق من موارد MAS الرئيسية باستخدام MkDocs ونسق mkdocs-material. كل مورد موجود في مستودع GitHub الخاص به: المورد| الوصف|...

Security-Champions

Guide des champions de la sécurité OWASP Utilisation de MKDocs pour héberger notre contenu à côté de la page du projet OWASP sur https://securitychampions.owasp.org/. Inspiré par https://github.com/OWASP/API-Security et https://github.com/OWASP/Top10/tree/master/2021. Créer une copie locale sous...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

CVE-2021-40978

CVE-2021-40978 Exploitation de traversée de répertoire du serveur de développement intégré de mkdocs Mkdocs 1.2.2 permet une traversée de répertoire via le serveur de développement intégré qui répond sur le port 8000. Vous trouverez ci-dessous quelques exemples de chemins exploités avec succès :...

GHSA-Q38J-6VCM-2F5M Backstage: Improper validation of MkDocs plugin configuration in TechDocs

Impact An authenticated attacker with control over a TechDocs source repository could cause a documentation build to retrieve and publish data from network locations reachable by the build environment. Exposure depends on deployment topology, build mode, and target endpoint protections. Modern...

Backstage: Improper validation of MkDocs plugin configuration in TechDocs

Impact An authenticated attacker with control over a TechDocs source repository could cause a documentation build to retrieve and publish data from network locations reachable by the build environment. Exposure depends on deployment topology, build mode, and target endpoint protections. Modern...

EUVD-2026-93986

Backstage: Improper validation of MkDocs plugin configuration in TechDocs...

Backstage: Improper validation of TechDocs MkDocs configuration

Impact An attacker who can provide configuration to a TechDocs build may execute code in the generator runtime. Impact is greatest when documentation generation runs with backend credentials or host access. Patches Patched in @backstage/plugin-techdocs-node version 1.15.4. Workarounds Use externa...

GHSA-QMW3-745M-W99G Backstage: Improper validation of TechDocs MkDocs configuration

Impact An attacker who can provide configuration to a TechDocs build may execute code in the generator runtime. Impact is greatest when documentation generation runs with backend credentials or host access. Patches Patched in @backstage/plugin-techdocs-node version 1.15.4. Workarounds Use externa...

GHSA-P75X-JH7P-PPCX Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Impact Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. Patches Patched...

EUVD-2026-94070

Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend...

Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Impact Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. Patches Patched...

EUVD-2026-94073

Backstage has potential file exposure through local TechDocs publisher...

CVE-2026-106509

A flaw was found in the Backstage plugin-techdocs-node package. When TechDocs is configured to build documentation locally or within a container, an authenticated user with write access to a registered repository can submit malicious configuration values within the MkDocs theme settings. This fla...

CVE-2026-106505

A flaw was found in the plugin-techdocs-node component of Backstage. This vulnerability allows an attacker with permission to commit changes to a repository utilizing TechDocs to bypass the MkDocs configuration sanitizer. By supplying a crafted configuration file, the attacker can achieve arbitra...

CVE-2026-106455

A flaw was found in the Backstage @backstage/plugin-techdocs-node package. This vulnerability allows information disclosure when an authenticated attacker with control over a TechDocs documentation repository exploits improper validation of MkDocs plugin configurations. During documentation build...

CVE-2026-106507

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2026-106505

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can...