Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersBackstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml
Backstage: Improper validation of TechDocs MkDocs configuration
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
Backstage has potential file exposure through local TechDocs publisher
Backstage: Improper validation of MkDocs theme configuration in TechDocs
Backstage has improper input validation in TechDocs Markdown extension configuration
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks
@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator
Path traversal for local publishers in TechDocs backend
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.