Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2026/03/05 12:12 a.m.•26 views

GHSA-928R-FM4V-MVRW TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

Impact This is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an...

7.7CVSS6.7AI score0.00814EPSS
SaveExploits0References6
Rows per page
Query Builder