https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:04:20 +0000 https://cve.radiocsirt.org/vuln/cve-2026-29186 <p><strong>Affected:</strong> backstage, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9, Red Hat Self-service automation portal 2</p> <p>Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml that causes arbitrary Python code execution, completely bypassing TechDocs&#39; security controls. This issue has been patched in version 1.14.3.</p> <p><strong>Affected:</strong> backstage, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9, Red Hat Self-service automation portal 2</p> <p>Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml that causes arbitrary Python code execution, completely bypassing TechDocs&#39; security controls. This issue has been patched in version 1.14.3.</p> https://cve.radiocsirt.org/vuln/cve-2026-29186