File and Path Handling

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

1. Path Traversal in @backstage/plugin-scaffolder-backendCVE-2021-41151backstage · CVSS 6.8 · 1.3% likely

   CWE-22

2. TechDocs mkdocs.yml path traversalCVE-2021-32662backstage · CVSS 6.5 · 1.3% likely

   CWE-22

3. Path Traversal in @backstage/plugin-scaffolder-backendCVE-2021-43783backstage · CVSS 8.5 · 1.2% likely

   CWE-22

4. @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code ExecutionCVE-2026-29186backstage · CVSS 7.7 · 0.9% likely

   CWE-434

5. `@backstage/backend-common` vulnerable to path traversal through symlinksCVE-2024-26150backstage · CVSS 8.7 · 0.8% likely

   CWE-22

6. Storage bucket Directory Traversal in @backstage/plugin-techdocs-backendCVE-2024-45816backstage · CVSS 6.5 · 0.7% likely

   CWE-23

7. @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain BypassCVE-2026-24047backstage · CVSS 6.3 · 0.5% likely

   CWE-61

8. Backstage has a Possible Symlink Path Traversal in Scaffolder ActionsCVE-2026-24046backstage · CVSS 7.1 · 0.5% likely

   CWE-22

9. @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local GeneratorCVE-2026-25152backstage · CVSS 5.3 · 0.4% likely

   CWE-22

10. @backstage/integration: Potential reading of SCM URLs using built in tokenCVE-2026-29185backstage · CVSS 2.7 · 0.4% likely

    CWE-22

11. Backstage: Potential file exposure through local TechDocs publisherCVE-2026-106508backstage · CVSS 5.3 · 0.4% likely

    CWE-22

12. Backstage: TechDocs arbitrary file read via mkdocs snippetsCVE-2026-106507backstage · CVSS 5.3 · 0.4% likely

    CWE-61

13. Backstage: Improper input validation in TechDocs Markdown extension configurationCVE-2026-106557backstage · CVSS 7.7 · 0.4% likely

    CWE-22

14. Backstage: Improper input validation in TechDocs static content requestsCVE-2026-106490backstage · CVSS 6.5 · 0.4% likely

    CWE-23

15. Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actionsCVE-2026-106486backstage · CVSS 8.5 · 0.4% likely

    CWE-22

16. Backstage: Improper task state validation in Scaffolder backendCVE-2026-106500backstage · CVSS 8.5 · 0.3% likely

    CWE-59

17. Backstage: Improper input validation in Confluence to Markdown scaffolder moduleCVE-2026-106559backstage · CVSS 6.3 · 0.3% likely

    CWE-22

18. Backstage catalog rules can be bypassed for URL locations using encoded path segmentsCVE-2026-115923backstage · CVSS 6.5 · 0.3% likely

    CWE-22

19. Backstage: Improper repository path validation in a Scaffolder backend moduleCVE-2026-106560backstage · CVSS 7.1 · 0.3% likely

    CWE-22

20. Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backendCVE-2026-106505backstage · CVSS 7.7 · 0.3% likely

    CWE-426

21. Backstage: Improper input validation in cloud storage URL readersCVE-2026-106494backstage · CVSS 4.4 · 0.3% likely

    CWE-22

22. Backstage: Improper authorization enforcement for TechDocs static contentCVE-2026-106489backstage · CVSS 6.5 · 0.3% likely

    CWE-22

23. Backstage: Cloud storage catalog locations may cross configured storage boundariesCVE-2026-106493backstage · CVSS 3 · 0.3% likely

    CWE-22

24. Backstage: Improper input validation in proxy-backendCVE-2026-106491backstage · CVSS 6.4 · 0.3% likely

    CWE-22

25. Backstage: Inconsistent enforcement of allowed location types during catalog processingCVE-2026-106496backstage · CVSS 3.1 · 0.2% likely

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.