Skip to contentRed Hat Openshift Update Service vulnerabilities
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: ssrf via build archive_url in quay build apiCVE-2026-742474.2 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: unauthenticated exported logs download in quayCVE-2026-742455.9 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: stripe webhook accepts forged events without signature verification in quayCVE-2026-742445.9 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: unauthenticated secscan notification endpoint in quay when psk is unsetCVE-2026-742436.5 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: repository notification uuid idor in quay apiCVE-2026-742425.3 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: ldap referral filter injection in quay external ldap authenticationCVE-2026-742414.8 Medium
- redhat quay, red hat openshift update service, quay 3 +2 moreQuay: jwt claim validation bypasses in quay federated robot and sso authenticationCVE-2026-742405.4 Medium
- red hat openshift update service, quay 3 +1 moreQuay: ssrf in red hat quay notification webhooks (slack/generic)CVE-2026-169105.5 Medium
- libssh2, red hat enterprise linux 6, enterprise linux 7 +9 more +11 morelibssh2 userauth.c userauth_password integer overflowCVE-2026-7598Fix available6.9 Medium
- red hat openshift update serviceOsus-operator: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578546.4 Medium
- quinn-rs quinn, red hat confidential compute attestation, logging subsystem for red hat openshift +13 more +15 moreQuinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsingCVE-2026-31812Fix available8.7 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Signature Validation Bypass in AWS-LCCVE-2026-3338Fix available8.7 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Certificate Chain Validation Bypass in AWS-LCCVE-2026-3336Fix available8.7 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High