Red Hat mirror registry for Red Hat OpenShift 2

• CVE-2026-85471 Medium 6.4 Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable 0.2%
• CVE-2026-15927 Medium 6.8 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation 0.6%
• CVE-2026-32591 Medium 5.2 Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration 0.3%
• CVE-2025-14243 Medium 5.3 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages 0.3%
• CVE-2026-2377 Medium 6.5 Mirror-registry: quay: quay: server-side request forgery via log export functionality 0.4%
• CVE-2026-2376 Medium 4.9 Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface 0.2%