Red Hat Security Advisory

RHSA-2026:86957

Red Hat Developer Hub 1.10.6 Plugin Catalog GA plugins release.

Released 2026-10-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend, registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend, registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki +1

TI-2026-61668 CVE-2026-90711 · GHSA-jqcg-44mw-7w3h

MEDIUM 41

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0026 Published 2026-09-15 Partial fix · 2.0.8 CWE-290