CVE-2026-85471

A flaw in Quay allows an authenticated repository administrator to bypass the hostname blacklist during webhook notifications . This oversight leads to a Server-Side Request Forgery (SSRF) vulnerability, where the application can be manipulated into making requests to internal network resources, ...