382 matches found
Important: Red Hat Security Advisory: Red Hat Quay 3.12.20
Red Hat Quay 3.12.20 is now available with bug fixes. Quay 3.12.20...
Important: Red Hat Security Advisory: Red Hat Quay 3.15.6
Red Hat Quay 3.15.6 is now available with bug fixes. Quay 3.15.6...
CVE-2026-15927
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...
CVE-2026-15927 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...
CVE-2026-15927
CVE-2026-15927: Red Hat Quay repository-level mirror feature allows SSRF via external_reference in POST/PUT to endpoints/api/mirror.py, not applying the stricter validate_external_registry_url() used by organization-level mirrors. This enables a repository administrator to craft a hostname that m...
CVE-2026-15927 Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...
CVE-2026-15927
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an externalreference parameter without SSRF validation, unlike the organization-level mirror handlers which apply validateexternalregistryurl. A repository...
PT-2026-61830
Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists in the repository-level mirror configuration feature. The POST and PUT handlers in the endpoints/api/mirror.py file accept an external reference parameter without Server-Si...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.20
Red Hat Quay 3.12.20 is now available with bug fixes. Quay 3.12.20...
Important: Red Hat Security Advisory: Red Hat Quay 3.16.5
Red Hat Quay 3.16.5 is now available with bug fixes. Quay 3.16.5...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.24
Red Hat Quay 3.10.24 is now available with bug fixes. Quay 3.10.24...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.24
Red Hat Quay 3.9.24 is now available with bug fixes. Quay 3.9.24...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.21.1 security update
Important: Red Hat OpenShift GitOps v1.21.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-10083 RC 1.21.0-7: Missing permission for web-based terminal in Argocd UI GITOPS-10178 OpenShift GitOps operator v1.21.0 breaks Redis-HA...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.5 security update
Important: Red Hat OpenShift GitOps v1.20.5 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-9568 GitOps operator propagates argo CD tracking annotations to dynamic roleBindings GITOPS-9971 Image Updater Self-hosted Quay images redirect t...
Important: Red Hat Security Advisory: Red Hat Quay 3.10.23
Red Hat Quay 3.10.23 is now available with bug fixes. Quay 3.10.23...
SUSE CVE-2026-10517
Retracted following review by Red Hat Product Security and confirmation from the upstream Clair/Claircore maintainer. This CVE misattributes the described behavior to github.com/quay/claircore: the authentication mechanism in question optional PSK, HTTP endpoint /indexer/api/v1/indexreport is...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.19
Red Hat Quay 3.12.19 is now available with bug fixes. Quay 3.12.19...
Important: Red Hat Security Advisory: Red Hat Quay 3.9.23
Red Hat Quay 3.9.23 is now available with bug fixes. Quay 3.9.23...