Skip to content
Red Hat Quay vulnerabilities
-
red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 more
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
CVE-2026-114236
3.3 Low
-
red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2, quay 3 +2 more
Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable
CVE-2026-85471
6.4 Medium
-
red hat quay 3
Quay: repository auto-prune policy uuid idor in quay api
CVE-2026-109195
3.1 Low
-
red hat quay 3
Quay: build trigger uuid idor in quay api
CVE-2026-109194
6.4 Medium
-
red hat quay 3
Quay: quay: global read-only superuser can access build trigger write credentials
CVE-2026-105447
5.5 Medium
-
red hat quay 3
Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page
CVE-2026-102576
4.2 Medium
-
red hat quay 3
Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter
CVE-2026-102295
5.4 Medium
-
red hat quay 3
Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
CVE-2026-85469
8.0 High
-
red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +6 more +8 more
Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory
CVE-2026-79699
Fix available
4.4 Medium
-
red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 more
Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers
CVE-2026-79705
Fix available
4.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ssrf via build archive_url in quay build api
CVE-2026-74247
4.2 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated exported logs download in quay
CVE-2026-74245
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: stripe webhook accepts forged events without signature verification in quay
CVE-2026-74244
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74243
6.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: repository notification uuid idor in quay api
CVE-2026-74242
5.3 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74241
4.8 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: jwt claim validation bypasses in quay federated robot and sso authentication
CVE-2026-74240
5.4 Medium
-
red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +7 more +9 more
Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives
CVE-2026-19730
Fix available
4.2 Medium
-
red hat advanced cluster security 4, quay 3 +1 more
Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
CVE-2026-19519
4.3 Medium
-
red hat quay 3.10, quay 3.12, quay 3.14 +5 more +7 more
Quay: quay: global read-only superuser can view robot account tokens
CVE-2026-18255
7.2 High
-
red hat openshift update service, quay 3 +1 more
Quay: ssrf in red hat quay notification webhooks (slack/generic)
CVE-2026-16910
5.5 Medium
-
red hat mirror registry for red hat openshift 2, quay 3.10, quay 3.12 +5 more +7 more
Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
CVE-2026-15927
6.8 Medium
-
red hat advanced cluster security 4, quay 3 +1 more
Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser
CVE-2026-16254
4.3 Medium
-
fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 more
fast-uri vulnerable to host confusion via failed IDN canonicalization
CVE-2026-13676
Fix available
7.5 High
-
websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 more
ws: Memory exhaustion DoS from tiny fragments and data chunks
CVE-2026-48779
Fix available
7.5 High
-
form-data, red hat cluster observability operator 1.5.0, cryostat 4 +77 more +79 more
form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
CVE-2026-12143
Fix available
8.7 High
-
dana powers kafka-python, red hat quay 3.10, quay 3.12 +3 more +5 more
kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py
CVE-2026-10143
Fix available
8.7 High
-
red hat quay 3
Quay: quay: stored xss via filedrop svg upload
CVE-2026-11569
5.4 Medium
-
axios, red hat cryostat 4, gatekeeper 3 +62 more +64 more
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
CVE-2026-44496
Fix available
7.5 High
-
axios, red hat cryostat 4, gatekeeper 3 +65 more +67 more
Axios: Allocation of Resources Without Limits or Throttling in axios
CVE-2026-44488
Fix available
7.5 High
-
axios, red hat cryostat 4, gatekeeper 3 +65 more +67 more
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
CVE-2026-44487
Fix available
8.2 High
-
axios, red hat cryostat 4, gatekeeper 3 +63 more +65 more
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
CVE-2026-44486
Fix available
7.5 High
-
go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 more
Inefficient candidate hostname parsing in crypto/x509
CVE-2026-27145
Public exploitFix available
6.5 Medium
-
vitejs launch-editor, vite, red hat cluster observability operator 1.5.0 +25 more +27 more
launch-editor vulnerable to command injection via the crafted request on Windows
CVE-2024-52011
Public exploitFix available
7.5 High
-
axios, red hat cryostat 4, gatekeeper 3 +79 more +81 more
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
CVE-2026-44495
Fix available
7.0 High
-
axios, red hat cryostat 4, gatekeeper 3 +65 more +67 more
Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
CVE-2026-44494
Fix available
8.7 High
-
axios, red hat cryostat 4, gatekeeper 3 +65 more +67 more
Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
CVE-2026-44492
Fix available
EPSS 12.3%
8.6 High
-
red hat quay 3
Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring
CVE-2026-10078
2.7 Low
-
red hat quay 3
Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints
CVE-2026-10052
4.1 Medium
-
jpadilla pyjwt, red hat openshift lightspeed, ai inference server +37 more +39 more
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
CVE-2026-48526
Fix available
7.4 High
-
pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 more
pip can extract console_scripts and gui_scripts outside installation directory
CVE-2026-8643
Fix available
4.1 Medium
-
shell-quote, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 more
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
CVE-2026-9277
Public exploitFix available
9.2 Critical
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 more
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
CVE-2026-46595
Public exploitFix available
10.0 Critical
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts, red hat assisted installer for red hat openshift container platform 2 +53 more +55 more
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
CVE-2026-42508
Fix available
9.1 Critical
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +62 more +64 more
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
CVE-2026-39835
Fix available
5.3 Medium
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh/agent, red hat assisted installer for red hat openshift container platform 2 +46 more +48 more
Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
CVE-2026-39832
Fix available
9.1 Critical
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 more
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
CVE-2026-39830
Fix available
9.1 Critical
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +74 more +76 more
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
CVE-2026-39829
Fix available
7.5 High
-
golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +64 more +66 more
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
CVE-2026-39828
Fix available
6.3 Medium
-
red hat ansible automation platform 2, openstack platform 18.0, quay 3 +1 more +3 more
APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
CVE-2026-31072
9.8 Critical
- Show olderLoading…