GHSA-7mfx-xg57-53c9

Suggest an improvement
Source
https://github.com/advisories/GHSA-7mfx-xg57-53c9
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-7mfx-xg57-53c9/GHSA-7mfx-xg57-53c9.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-7mfx-xg57-53c9
Aliases
Published
2026-10-07T18:00:00Z
Modified
2026-10-07T18:15:13Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Backstage: Improper input validation in TechDocs static content requests
Details

Impact

When using the Azure Blob Storage provider, an authenticated Backstage user may be able to read restricted TechDocs content when entity-level permissions are enabled. Deployments that intentionally disable the default backend authentication policy may have broader exposure.

Patches

Patched in @backstage/plugin-techdocs-backend version 2.2.4

Workarounds

  • Restrict access to the TechDocs backend to users who are permitted to view all stored documentation until an upgrade can be applied.
  • Keep the default backend authentication policy enabled.
Database specific 
{
    "cwe_ids": [
        "CWE-22",
        "CWE-23"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-10-07T18:00:00Z",
    "nvd_published_at": "2026-10-06T21:17:17Z",
    "severity": "MODERATE"
}
References

Affected packages

npm / @backstage/plugin-techdocs-backend

Package

Name
@backstage/plugin-techdocs-backend
View open source insights on deps.dev
Purl
pkg:npm/%40backstage/plugin-techdocs-backend

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.2.4

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-7mfx-xg57-53c9/GHSA-7mfx-xg57-53c9.json"