Skip to contentRed Hat Mirror Registry For Red Hat Openshift vulnerabilities
- red hat mirror registry for red hat openshift 2, quay 3 +1 moreQuay: quay: reflected xss via image_id in v1 registry error responsesCVE-2026-1288245.4 Medium
- project quay quay, red hat mirror registry for red hat openshift 2, quay 3.10 +8 more +10 moreQuay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokensCVE-2026-110697Public exploit9.9 Critical
- project quay quay, red hat mirror registry for red hat openshift 2, quay 3.10 +8 more +10 moreQuay: red hat quay: unauthenticated registry signing-key takeover via service key rotationCVE-2026-1237109.8 Critical
- red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2, quay 3 +2 moreQuay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassableCVE-2026-854716.4 Medium
- red hat mirror registry for red hat openshift 2, quay 3.10, quay 3.12 +5 more +7 moreQuay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validationCVE-2026-159276.8 Medium
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 moreInefficient candidate hostname parsing in crypto/x509CVE-2026-27145Public exploitFix available6.5 Medium
- go standard library net, golang go, red hat assisted installer for red hat openshift container platform 2 +145 more +147 moreCrash when handling long CNAME response in netCVE-2026-33811Fix available7.5 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +8 more +10 moreMirror-registry: quay: server-side request forgery in proxy cache upstream registry configurationCVE-2026-325915.2 Medium
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +8 more +10 moreMirror-registry: remote code execution using pickle deserializationCVE-2026-325907.1 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2.0 +7 more +9 moreMirror-registry: quay: insecure direct object reference in blobuploadCVE-2026-325897.4 High
- red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +1 moreMirror-registry: openshift mirror registry: user enumeration via authentication error messagesCVE-2025-142435.3 Medium
- red hat mirror registry for red hat openshift, redhat quay, red hat mirror registry for red hat openshift 2 +6 more +8 moreMirror-registry: quay: quay: server-side request forgery via log export functionalityCVE-2026-23776.5 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +103 more +105 moreCase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810Fix available8.2 High
- go standard library crypto/tls, golang go, red hat assisted installer for red hat openshift container platform 2 +117 more +119 moreUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +140 more +142 moreUnexpected work during chain building in crypto/x509CVE-2026-32280Fix available7.5 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +2 more +4 moreMirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interfaceCVE-2026-23764.9 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +143 more +145 moreIncorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Fix available7.5 High
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x509CVE-2026-27137Fix available7.5 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- red hat mirror registry for red hat openshiftMirror-registry: host header injection in mirror-registryCVE-2025-77776.5 Medium
- red hat mirror registry for red hat openshift, mirror-registry-2.0-rhel-8 +1 moreMirror-registry: local privilege escalation due to incorrect permissions in mirror-registryCVE-2025-35288.2 High
- red hat mirror registry for red hat openshiftMirror-registry: redis password stored in plain-textCVE-2024-36257.3 High
- red hat mirror registry for red hat openshiftMirror-registry: database user and password stored in plain-textCVE-2024-36247.3 High
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: default database secret key stored in plain-text on initial configuration fileCVE-2024-36236.5 Medium
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: plain-text default csrf secret keyCVE-2024-36228.8 High