linuxfoundation
5 records · 5 with a public proof-of-concept
Disclosed vulnerabilities where the NVD names linuxfoundation as an affected vendor, highest CVSS first.
- HIGH 7.7CVE-2026-106509public PoC
Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally…
backstage plugin-techdocs-node · backstage
- HIGH 7.7CVE-2026-106505public PoC
Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a re…
backstage plugin-techdocs-node · backstage
- MEDIUM 5.3CVE-2026-106508public PoC
Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local techdocs publisher. When using the local TechDocs publisher (techdocs.publisher.typ…
backstage plugin-techdocs-node · backstage
- MEDIUM 5.3CVE-2026-106507public PoC
Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authe…
backstage plugin-techdocs-node · backstage
- MEDIUM 5.3CVE-2026-106506public PoC
Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create…
backstage\/plugin-scaffolder-backend · backstage