CVE-2026-32589 Mirror-registry: quay: insecure direct object reference in blobupload

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.1",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779822261",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.10::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.12",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779811412",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.12::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.14",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779689392",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.14::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.15",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1780891395",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.15::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779204086",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.16::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.17",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779922205",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.17::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Quay 3.9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "quay/quay-rhel8",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1779811473",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:quay:3.9::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "mirror registry for Red Hat OpenShift",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift/mirror-registry-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:mirror_registry:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "mirror registry for Red Hat OpenShift 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift/mirror-registry-rhel8",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:mirror_registry:2"
    ]
  }
]