Red Hat Security Advisory

RHSA-2026:61721

Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.

Released 2026-08-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed, registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend, registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator +4

TI-2026-48541 CVE-2026-69192 · GHSA-mwp4-54f8-5fhr

HIGH 75

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00465 Published 2026-08-03 Partial fix · 10.3.1 CWE-20

TI-2026-48532 CVE-2026-69152 · GHSA-rgw5-rvv9-x895

HIGH 72

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2026-08-03 Partial fix · 1.1.18, 2.1.4 +2 CWE-400