CVE-2026-128824

A flaw in Red Hat Quay allows for a reflected cross-site scripting (XSS) attack due to an improper neutralization of input in the v1 registry API error handler . The vulnerability occurs when the application reflects an attacker-supplied image_id path segment in a response served as text/html . B...