@backstage/plugin-techdocs-node (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @backstage/plugin-techdocs-node, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2026-25153 — CVSS 7.7 (high): Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities…
• CVE-2026-29186 — CVSS 7.7 (high): Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that…
• CVE-2026-25152 — CVSS 5.3 (medium): Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities…