Red Hat Red Hat Quay 3.16

• CVE-2026-18255 High 7.2 Quay: quay: global read-only superuser can view robot account tokens 0.8%
• CVE-2026-15927 Medium 6.8 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation 0.6%
• CVE-2026-32591 Medium 5.2 Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration 0.3%
• CVE-2026-32590 High 7.1 Mirror-registry: remote code execution using pickle deserialization 0.5%
• CVE-2026-32589 High 7.4 Mirror-registry: quay: insecure direct object reference in blobupload 0.3%
• CVE-2026-2377 Medium 6.5 Mirror-registry: quay: quay: server-side request forgery via log export functionality 0.4%