linuxfoundation

8 records · 8 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names linuxfoundation as an affected vendor, highest CVSS first.

  1. HIGH 8.8CVE-2026-106558public PoC2026-10-07

    Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style markdown_extensions configuration. An authenticated attacker who can register or i…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.7CVE-2026-106556public PoC2026-10-07

    Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by configuration bypass in techdocs mkdocs.yml sanitization. Insufficient validation of MkDocs configuration during TechDocs…

    backstage · backstage plugin-techdocs-node

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.7CVE-2026-106510public PoC2026-10-07

    Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by remote code execution via crafted markdown_extensions in techdocs mkdocs.yml. An authenticated user who can register cata…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.7CVE-2026-106509public PoC2026-10-06

    Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.7CVE-2026-106505public PoC2026-10-06

    Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a re…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.3CVE-2026-106508public PoC2026-10-06

    Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local techdocs publisher. When using the local TechDocs publisher (techdocs.publisher.typ…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 5.3CVE-2026-106507public PoC2026-10-06

    Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authe…

    backstage plugin-techdocs-node · backstage

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 5.3CVE-2026-106506public PoC2026-10-06

    Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with permission to create…

    backstage\/plugin-scaffolder-backend · backstage

    AI risk analysis on Exploit-DB.ai →