RHSA-2026:6802 - Security Advisory

Topic

Red Hat Developer Hub 1.9.3 has been released.

Description

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.

Solution

For more about Red Hat Developer Hub, see References links

Fixes

• RHDHBUGS-2736 - Can't install OCI plugin if ref contains both registry hostname and port due to wrong parsing errors

CVEs

• CVE-2025-61140
• CVE-2025-69873
• CVE-2026-1615
• CVE-2026-2359
• CVE-2026-24046
• CVE-2026-25153
• CVE-2026-25639
• CVE-2026-25679
• CVE-2026-25896
• CVE-2026-26278
• CVE-2026-27606
• CVE-2026-27942
• CVE-2026-3304
• CVE-2026-33186
• CVE-2026-3520

References

• https://access.redhat.com/security/updates/classification/
• https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh
• https://developers.redhat.com/rhdh/overview
• https://docs.redhat.com/en/documentation/red_hat_developer_hub
• https://issues.redhat.com/browse/RHDHBUGS-2736