Vulnerability	Vulnerable Version
M Symlink Attack @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Symlink Attack via symlink handling in the `LocalPublish` publisher, where the publish pipeline copies documentation directories to a local storage path without validating that symbolic links within the source directory resolve to paths inside the documentation tree. An authenticated attacker who can influence the content of a TechDocs documentation directory can plant symlinks pointing to arbitrary host filesystem paths, causing the documentation serving endpoint to expose those files. Note: This is only exploitable when the local TechDocs publisher is configured (`techdocs.publisher.type: 'local'`). How to fix Symlink Attack? Upgrade `@backstage/plugin-techdocs-node` to version 1.15.4 or higher.	<1.15.4

Symlink Attack

@backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli

Affected versions of this package are vulnerable to Symlink Attack via symlink handling in the LocalPublish publisher, where the publish pipeline copies documentation directories to a local storage path without validating that symbolic links within the source directory resolve to paths inside the documentation tree. An authenticated attacker who can influence the content of a TechDocs documentation directory can plant symlinks pointing to arbitrary host filesystem paths, causing the documentation serving endpoint to expose those files.

Note: This is only exploitable when the local TechDocs publisher is configured (techdocs.publisher.type: 'local').

How to fix Symlink Attack?

Upgrade @backstage/plugin-techdocs-node to version 1.15.4 or higher.

<1.15.4

Go back to all versions of this package