Skip to content
Redhat Openshift Update Service vulnerabilities
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ssrf via build archive_url in quay build api
CVE-2026-74247
4.2 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated exported logs download in quay
CVE-2026-74245
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: stripe webhook accepts forged events without signature verification in quay
CVE-2026-74244
5.9 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74243
6.5 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: repository notification uuid idor in quay api
CVE-2026-74242
5.3 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74241
4.8 Medium
-
redhat quay, red hat openshift update service, quay 3 +2 more
Quay: jwt claim validation bypasses in quay federated robot and sso authentication
CVE-2026-74240
5.4 Medium
-
red hat openshift update service
Osus-operator: privilege escalation via excessive /etc/passwd permissions
CVE-2025-57854
6.4 Medium