490 matches found
CVE-2026-2377
CVE-2026-2377 affects mirror-registry’s log export functionality. Authenticated users can trigger a server-side request forgery (SSRF) by supplying a crafted URL, allowing the backend to reach internal network resources. This may expose sensitive information or access to internal systems. The des...
CVE-2026-2377: Server-Side Request Forgery (SSRF)
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as...
Red Hat Quay 安全漏洞
Red Hat Quay is a distributed container image repository provided by the American company Red Hat. It is primarily used for building, distributing, and deploying containers. Red Hat Quay has a security vulnerability that stems from defects in the container image upload process. This vulnerability...
CVE-2026-32591: Server-Side Request Forgery (SSRF)
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An...
CVE-2026-32589: Authorization Bypass Through User-Controlled Key
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to rea...
Red Hat Quay 代码问题漏洞
Red Hat Quay is a distributed container image repository provided by the American company Red Hat. It is primarily used for building, distributing, and deploying containers. Red Hat Quay has code-related vulnerabilities. These vulnerabilities arise from the possibility of tampering with the...
PT-2026-31342
Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database in a format that, if manipulated, could...
CVE-2026-32590: Deserialization of Untrusted Data
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server...
Red Hat Quay 代码问题漏洞
Red Hat Quay is a distributed container image repository provided by the American company Red Hat. It is primarily used for building, distributing, and deploying containers. Red Hat Quay has code-related vulnerabilities. These vulnerabilities stem from the Proxy Cache configuration feature, which...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.20
Red Hat Quay 3.9.20 is now available with bug fixes. Quay 3.9.20...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.20
Red Hat Quay 3.10.20 is now available with bug fixes. Quay 3.10.20...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.16
Red Hat Quay 3.12.16 is now available with bug fixes. Quay 3.12.16...
Important: Red Hat Security Advisory: Red Hat Quay 3.15.4
Red Hat Quay 3.15.4 is now available with bug fixes. Quay 3.15.4...
Important: Red Hat Security Advisory: Red Hat Quay 3.16.3
Red Hat Quay 3.16.3 is now available with bug fixes. Quay 3.16.3...
Important: Red Hat Security Advisory: Red Hat Quay 3.16.3
Red Hat Quay 3.16.3 is now available with bug fixes. Quay 3.16.3...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.19
Red Hat Quay 3.10.19 is now available with bug fixes. Quay 3.10.19...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.19
Red Hat Quay 3.9.19 is now available with bug fixes. Quay 3.9.19...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.15
Red Hat Quay 3.12.15 is now available with bug fixes. Quay 3.12.15...