{"action":"Upgrade @backstage/plugin-techdocs-node to 1.14.7 or later.","affected":[{"fixed":"1.14.7","introduced":"0.11.12"},{"fixed":"1.15.5","introduced":"1.15.0"}],"component":"@backstage/plugin-techdocs-node","cve_ids":["CVE-2026-106455"],"ecosystem":"npm","epss":0.00333,"exploited":false,"fixed_versions":["1.14.7","1.15.5"],"ghsa_id":"GHSA-q38j-6vcm-2f5m","id":"tcs_01M5KG4XF6VHES5MZ6S0WMZH35","modified_at":"2026-10-07T20:30:07.085070143Z","published_at":"2026-10-07T20:25:19Z","references":["https://osv.dev/vulnerability/GHSA-q38j-6vcm-2f5m","https://github.com/backstage/backstage/security/advisories/GHSA-q38j-6vcm-2f5m","https://nvd.nist.gov/vuln/detail/CVE-2026-106455","https://github.com/backstage/backstage/commit/28aa82ae2815988721dd7bbf43cd69c431dcd71b","https://github.com/backstage/backstage/commit/9f76ea445088961f68c364764cc4b7734f368fc0","https://github.com/backstage/backstage","https://github.com/backstage/backstage/releases/tag/v1.50.6","https://github.com/backstage/backstage/releases/tag/v1.54.8","https://github.com/backstage/backstage/releases/tag/v1.55.0"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-q38j-6vcm-2f5m","url":"https://osv.dev/vulnerability/GHSA-q38j-6vcm-2f5m"}],"summary":"Backstage: Improper validation of MkDocs plugin configuration in TechDocs"}