Product by MediaTek, Inc.
Linux Foundation Backstage Plugin-techdocs-node
10 known vulnerabilities in Linux Foundation Backstage Plugin-techdocs-node (MediaTek, Inc.), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-88064 | Backstage: Improper input validation in TechDocs MkDocs configuration | 8.8 | |
| High | CVE-2026-106558 | Backstage: Improper validation of TechDocs MkDocs configuration | 8.8 | |
| Critical | CVE-2026-29186 | @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution | 7.7 | |
| High | CVE-2026-106510 | Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml | 7.7 | |
| High | CVE-2026-106509 | Backstage: Improper validation of MkDocs theme configuration in TechDocs | 7.7 | |
| High | CVE-2026-106455 | Backstage: Improper validation of MkDocs plugin configuration in TechDocs | 7.7 | |
| High | CVE-2026-106505 | Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend | 7.7 | |
| High | CVE-2026-106556 | Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization | 7.7 | |
| Medium | CVE-2026-106508 | Backstage: Potential file exposure through local TechDocs publisher | 5.3 | |
| Medium | CVE-2026-106507 | Backstage: TechDocs arbitrary file read via mkdocs snippets | 5.3 |