CVE-2026-29186
1 advisory.
npm/@backstage/plugin-techdocs-node CVE-2026-29186: high 7.7
TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Action: Upgrade @backstage/plugin-techdocs-node to 1.14.3 or later.
npm i @backstage/plugin-techdocs-node@1.14.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.3 | - |
Fixed versions
| 1.14.3 |
Sources
- osv: GHSA-928r-fm4v-mvrw
- https://github.com/backstage/backstage/security/advisories/GHSA-928r-fm4v-mvrw
- https://nvd.nist.gov/vuln/detail/CVE-2026-29186
- https://backstage.io/docs/features/techdocs/architecture
- https://github.com/backstage/backstage
- https://www.mkdocs.org/about/release-notes/#version-14-2022-09-27
- https://www.mkdocs.org/user-guide/configuration/#hooks
CVE-2026-29186 · published · modified · JSON