RHSA-2026:49642 - Security Advisory

Topic

Red Hat Developer Hub 1.10.3 has been released.

Description

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.

Solution

For more about Red Hat Developer Hub, see References links

Affected Products

• Red Hat Developer Hub

Fixes

• RHDHBUGS-3455 - Catalog index issues: outdated digests in 1.10.2 and 1.10/1.10.3 index refers to ghcr.io images for lightspeed and invalid digests for orchestrator
• RHDHBUGS-3503 - RHDH Operator 1.10.2 catalog resolves Orchestrator frontend, backend, and form-widgets dynamic plugins to older npm versions than RHDH Operator 1.10.1 via {{inherit}}

CVEs

• CVE-2026-13149
• CVE-2026-13676
• CVE-2026-42504
• CVE-2026-45740
• CVE-2026-46625
• CVE-2026-48068
• CVE-2026-48069
• CVE-2026-48801
• CVE-2026-49978
• CVE-2026-5038
• CVE-2026-5079
• CVE-2026-59869
• CVE-2026-59877
• CVE-2026-59892

References

• https://access.redhat.com/security/updates/classification/
• https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh
• https://developers.redhat.com/rhdh/overview
• https://docs.redhat.com/en/documentation/red_hat_developer_hub
• https://redhat.atlassian.net/browse/RHDHBUGS-3455
• https://redhat.atlassian.net/browse/RHDHBUGS-3503
• https://redhat.atlassian.net/browse/RHIDP-15065
• https://redhat.atlassian.net/browse/RHIDP-15162
• https://redhat.atlassian.net/browse/RHIDP-15197
• https://redhat.atlassian.net/browse/RHIDP-15243
• https://redhat.atlassian.net/browse/RHIDP-15293
• https://redhat.atlassian.net/browse/RHIDP-15388
• https://redhat.atlassian.net/browse/RHIDP-15469
• https://redhat.atlassian.net/browse/RHIDP-15535
• https://redhat.atlassian.net/browse/RHIDP-15582
• https://redhat.atlassian.net/browse/RHIDP-15681
• https://redhat.atlassian.net/browse/RHIDP-15779
• https://redhat.atlassian.net/browse/RHIDP-15786
• https://redhat.atlassian.net/browse/RHIDP-15787
• https://redhat.atlassian.net/browse/RHIDP-15801