CVE-2026-128824

A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied imageid path segment in a response served as text/html, allowing a reflected cross-site scripting XSS attack. By tricking a user into visiting a specially crafted URL, a remote attacker can execute...