CVE-2026-106490

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

@beejiujitsu/backstage-plugin-glean-backend (>=1.0.0, <=1.0.2), @roadiehq/backstage-plugin-glean-backend (1.0.1) potentially affected by CVE-2026-106490 via @backstage/plugin-techdocs-backend (1.11.6)

@backstage/plugin-techdocs-backend NPM version 1.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-backend and may be impacted: - @beejiujitsu/backstage-plugin-glean-backend =1.0.0, =1.0.2 -...

CVE-2026-106490 Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106490

The Backstage framework is vulnerable to an improper input validation flaw in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 . When utilizing the Azure Blob Storage provider , an authenticated user may be able to access restricted TechDocs content if entity-level permission...

CVE-2026-106489

The Backstage framework is vulnerable in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 due to improper authorization enforcement for TechDocs static content. An authenticated user with access to one documentation site can craft a URL to read documentation belonging to a di...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

@beejiujitsu/backstage-plugin-glean-backend (>=1.0.0, <=1.0.2), @roadiehq/backstage-plugin-glean-backend (1.0.1) potentially affected by CVE-2026-106489 via @backstage/plugin-techdocs-backend (1.11.6)

@backstage/plugin-techdocs-backend NPM version 1.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-backend and may be impacted: - @beejiujitsu/backstage-plugin-glean-backend =1.0.0, =1.0.2 -...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

PT-2026-107270

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper authorization enforcement for static content. An authenticated user with access to one TechDocs documentation site can craft a URL t...

PT-2026-107302

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.14.6 Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package contains a flaw in the techdocs backend that allows a bypass of the mkdocs configuration sanitizer. Users capable of...

CVE-2026-106489: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106505: Untrusted Search Path

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can...

CVE-2026-106490: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

PT-2026-107271

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper input validation during static content requests. When the Azure Blob Storage provider is utilized and entity-level permissions are...

@backstage/plugin-search-backend-module-techdocs (>=0.4.2-next.0, <=0.4.12-next.1), @backstage/plugin-techdocs-backend (>=0.0.0-nightly-2021111822616, <=2.1.6-next.1) +2 more potentially affected by CVE-2026-29186 via @backstage/plugin-techdocs-node (>=1.0.0, <=1.14.3-next.1)

@backstage/plugin-techdocs-node NPM version =1.0.0, =0.4.2-next.0, =0.0.0-nightly-2021111822616, =0.11.13, =0.0.0-nightly-2021111822616, =1.10.6-next.1 Source cves: CVE-2026-29186 Source advisory: OSV:GHSA-928R-FM4V-MVRW...

@backstage/plugin-techdocs-backend (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220), @techdocs/cli (>=0.0.0-nightly-20260123025240, <=0.0.0-nightly-20260126030220) potentially affected by CVE-2026-25153 via @backstage/plugin-techdocs-node (1.14.0)

@backstage/plugin-techdocs-node NPM version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on @backstage/plugin-techdocs-node and may be impacted: - @backstage/plugin-techdocs-backend =0.0.0-nightly-20260123025240, =0.0.0-nightly-20260123025240,...

@backstage/plugin-search-backend-module-techdocs (0.4.11-next.0), @backstage/plugin-techdocs-backend (>=0.0.0-nightly-20260123025240, <=2.1.5-next.0) +1 more potentially affected by CVE-2026-25152 via @backstage/plugin-techdocs-node (>=1.14.0, <=1.14.1-next.0)

@backstage/plugin-techdocs-node NPM version =1.14.0, =0.0.0-nightly-20260123025240, =0.0.0-nightly-20260123025240, =1.10.5-next.0 Source cves: CVE-2026-25152 Source advisory: SNYK:JS-BACKSTAGEPLUGINTECHDOCSNODE-15166605...

CVE-2024-45816

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks...