Red Hat Red Hat Quay 3

• CVE-2026-85471 Medium 6.4 Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable 0.2%
• CVE-2026-109195 Low 3.1 Quay: repository auto-prune policy uuid idor in quay api 0.2%
• CVE-2026-109194 Medium 6.4 Quay: build trigger uuid idor in quay api 0.2%
• CVE-2026-105447 Medium 5.5 Quay: quay: global read-only superuser can access build trigger write credentials 0.2%
• CVE-2026-102576 Medium 4.2 Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page 0.3%
• CVE-2026-102295 Medium 5.4 Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter 0.2%
• CVE-2026-85469 High 8.0 Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope 0.5%
• CVE-2026-79699 Medium 4.4 Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory 0.2%
• CVE-2026-79705 Medium 4.5 Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 0.4%
• CVE-2026-74247 Medium 4.2 Quay: ssrf via build archive_url in quay build api 0.2%
• CVE-2026-74245 Medium 5.9 Quay: unauthenticated exported logs download in quay 0.4%
• CVE-2026-74244 Medium 5.9 Quay: stripe webhook accepts forged events without signature verification in quay 0.2%
• CVE-2026-74243 Medium 6.5 Quay: unauthenticated secscan notification endpoint in quay when psk is unset 0.5%
• CVE-2026-74242 Medium 5.3 Quay: repository notification uuid idor in quay api 0.3%
• CVE-2026-74241 Medium 4.8 Quay: ldap referral filter injection in quay external ldap authentication 0.3%
• CVE-2026-74240 Medium 5.4 Quay: jwt claim validation bypasses in quay federated robot and sso authentication 0.3%
• CVE-2026-19730 Medium 4.2 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives 0.1%
• CVE-2026-19519 Medium 4.3 Claircore: claircore: denial of service via unchecked type assertion in rpm header parser 0.4%
• CVE-2026-16910 Medium 5.5 Quay: ssrf in red hat quay notification webhooks (slack/generic) 0.3%
• CVE-2026-16254 Medium 4.3 Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser 0.4%
• CVE-2026-11569 Medium 5.4 Quay: quay: stored xss via filedrop svg upload 0.1%
• CVE-2026-10078 Low 2.7 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring 0.2%
• CVE-2026-10052 Medium 4.1 Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints 0.2%
• CVE-2026-6848 Medium 5.4 Quay: red hat quay: authentication bypass allows privileged actions without valid credentials 0.3%
• CVE-2026-2376 Medium 4.9 Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface 0.2%
• CVE-2025-4374 Medium 6.5 Quay: incorrect privilege assignment 0.3%
• CVE-2024-9683 Medium 4.8 Quay: quay allows successful authentication with trucated version of the password 0.3%
• CVE-2024-5891 Medium 4.2 Quay: unauthorized user may authenticate via oauth application token 0.2%
• CVE-2023-4956 Medium 6.5 Quay: clickjacking on config-editor page severity 0.5%
• CVE-2023-4959 Medium 6.5 Quay: cross-site request forgery (csrf) on config-editor page 0.3%
• CVE-2023-3384 Medium 5.4 Quay: stored cross site scripting 0.5%