Important: Red Hat Security Advisory: Red Hat Quay

A new version of Red Hat Quay is now available. Red Hat Quay...

CVE-2026-85471

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-85471 Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-85471

A flaw in Quay allows an authenticated repository administrator to bypass the hostname blacklist during webhook notifications . This oversight leads to a Server-Side Request Forgery (SSRF) vulnerability, where the application can be manipulated into making requests to internal network resources, ...

EUVD-2026-97776

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-85471

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-109194

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2026-109195

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109194

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2026-109195

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

EUVD-2026-97499

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109195 Quay: repository auto-prune policy uuid idor in quay api

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109194

A flaw in Red Hat Quay allows an authenticated user with administrative access to any repository to perform an Insecure Direct Object Reference (IDOR) attack. The build trigger management API fails to verify if a requested trigger belongs to the specified repository. By knowing the universally un...

CVE-2026-109194 Quay: build trigger uuid idor in quay api

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2026-109195

A flaw in Quay allows an authenticated attacker to perform an Insecure Direct Object Reference (IDOR) to access repository auto-prune configurations from other namespaces. The root cause is a failure to properly enforce namespace scoping when retrieving policy details using a repository name and ...

EUVD-2026-97498

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

Important: Red Hat Security Advisory: Red Hat Quay

A new version of Red Hat Quay is now available. Red Hat Quay...

PT-2026-110637

🚨 CVE-2026-109194 A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanent...

CVE-2026-109194: Authorization Bypass Through User-Controlled Key

A flaw was found in Red Hat Quay. The build trigger management application programming interface API fails to verify whether a requested trigger belongs to the specified repository. An authenticated user with administrative access to any repository can view, modify, or permanently delete build...

CVE-2026-85471: Server-Side Request Forgery (SSRF)

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...