Red Hat mirror registry for Red Hat OpenShift

• CVE-2026-85471 Medium 6.4 Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable 0.2%
• CVE-2026-32591 Medium 5.2 Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration 0.3%
• CVE-2026-32590 High 7.1 Mirror-registry: remote code execution using pickle deserialization 0.5%
• CVE-2026-32589 High 7.4 Mirror-registry: quay: insecure direct object reference in blobupload 0.3%
• CVE-2025-14243 Medium 5.3 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages 0.3%
• CVE-2026-2377 Medium 6.5 Mirror-registry: quay: quay: server-side request forgery via log export functionality 0.4%
• CVE-2026-2376 Medium 4.9 Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface 0.2%
• CVE-2025-7777 Medium 6.5 Mirror-registry: host header injection in mirror-registry 0.2%
• CVE-2025-3528 High 8.2 Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry 0.2%
• CVE-2024-3624 High 7.3 Mirror-registry: database user and password stored in plain-text 0.3%
• CVE-2024-3625 High 7.3 Mirror-registry: redis password stored in plain-text 0.3%
• CVE-2024-3623 Medium 6.5 Mirror-registry: default database secret key stored in plain-text on initial configuration file 0.4%
• CVE-2024-3622 High 8.8 Mirror-registry: plain-text default csrf secret key 0.5%