Red Hat Red Hat Quay 3.18

• CVE-2026-18255 High 7.2 Quay: quay: global read-only superuser can view robot account tokens 0.8%
• CVE-2026-32591 Medium 5.2 Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration 0.3%
• CVE-2026-32590 High 7.1 Mirror-registry: remote code execution using pickle deserialization 0.5%