CVE-2019-9513

CVE-2019-9513 (and related HTTP/2 CVEs) affect nginx and nghttp2. The issues enable denial of service via HTTP/2 resource loops and priority/window manipulation, causing high CPU/memory usage. nginx 1.16.x and nghttp2 are specifically named in advisories; remediation is upgrading to fixed package...

CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2019-9517

CVE-2019-9517 describes an attack against some HTTP/2 implementations where unconstrained internal data buffering can cause a denial of service. The vulnerability arises when an attacker floods a connection with a large number of requests for a large response object while manipulating HTTP/2 flow...

CVE-2019-9511

CVE-2019-9511 is an HTTP/2 denial-of-service issue observed in multiple products where an attacker manipulates HTTP/2 window size and stream prioritization to force queuing of data in 1-byte chunks, potentially exhausting CPU/memory. Connected advisories confirm affected components include nginx ...

CVE-2019-9516

CVE-2019-9516 is an HTTP/2 header leak vulnerability affecting nginx and several Linux distributions. The issue occurs when an attacker sends streams with 0-length header names and values (optionally Huffman encoded), causing nginx to allocate memory for headers that may be kept until the session...

CVE-2019-9514

CVE-2019-9514 corresponds to an HTTP/2 vulnerability where an attacker floods a peer by sending HEADERS frames, causing unbounded memory growth and potential DoS. Public details in connected advisories show affected stacks include Go HTTP/2 implementations and Go-based tools, with remediation via...

CVE-2020-10735

CVE-2020-10735 affects Python’s integer parsing with non-binary bases, where int("text") on very long digit strings can cause a CPU DoS, impacting availability. The flaw is present in Python’s PyLong_FromString path and manifests in quadratic-time scenarios when parsing large decimal-like strings...

CVE-2019-9518

CVE-2019-9518 describes a denial-of-service risk in HTTP/2 where a flood of frames with empty payloads (DATA, HEADERS, CONTINUATION, PUSH_PROMISE) and no end-of-stream flag can exhaust CPU and memory. Connected docs confirm concrete mentions across multiple ecosystems: Cloud Foundry products (emp...

CVE-2019-9515

CVE-2019-9515 concerns an HTTP/2 settings flood that can cause memory/CPU exhaustion. Arista’s security advisory (Security Advisory 0043) states the vulnerability is in Go’s gRPC HTTP/2 usage and can affect TerminAttr, OpenConfig, CVP, and certain Wi‑Fi OpenConfig-enabled components when enabled....

CVE-2022-1227

CVE-2022-1227 describes a privilege-escalation flaw in Podman where an attacker could publish a malicious image to a public registry; when a victim downloads it, running the user command ‘podman top’ could grant access to the host filesystem, enabling information disclosure or DoS. The issue is t...

CVE-2026-44495

Axios versions from 0.19.0 through before 0.31.1 and 1.15.2 contain prototype-pollution gadgets in request config processing. If another vulnerability has polluted Object.prototype.transformResponse earlier in the same JS process, the polluted value may be treated as request config or an option v...

CVE-2022-2447

CVE-2022-2447 affects OpenStack Keystone. A time lag (up to one hour) between policy revocation and actual revocation could let a remote administrator maintain access longer than expected. Related advisories (e.g., Ubuntu USN-7926-1) reference this CVE and indicate that updates are available; app...

CVE-2020-27831

CVE-2020-27831 affects Red Hat Quay: a flaw in how the system handles the authorization token when authorizing email addresses for repository notifications allows an attacker to add email addresses they do not own to notifications. The root cause is improper protection of the authorization token ...

CVE-2023-3384

Technical details about CVE-2023-3384 (affected product/version, root cause, impact, fix) are not provided in the connected documents; monitor for updates.

CVE-2024-5891

CVE-2024-5891 affects Quay. If an attacker obtains the client ID of an application, they can use an OAuth token to authenticate to Quay services they otherwise should not access. The issue is limited to authentication (not authorization) and can enable access to applications via authentication-on...

CVE-2019-10205

CVE-2019-10205 affects Red Hat Quay. The issue: robot account tokens are stored in plain text in the Quay database. If an attacker can run database queries, they could read or write container images stored in the registry using those tokens. Impact aligns with partial confidentiality/integrity/av...

CVE-2020-27832

CVE-2020-27832 affects Red Hat Quay. The issue is a persistent Cross-site Scripting (XSS) vulnerability in the repository notification display, enabling an attacker to coerce a user into actions that impersonate the target user. The vulnerability impacts confidentiality, integrity and availabilit...

CVE-2021-3762

CVE-2021-3762 affects Clair’s ClairCore engine (directory traversal in Clair/ ClairCore) that allows arbitrary file writes when scanning a crafted container image, potentially enabling remote code execution. Several connected sources corroborate a path-traversal vulnerability within the ClairCore...

CVE-2023-4956

CVE-2023-4956 describes a clickjacking vulnerability in Red Hat Quay, where the config-editor page can be framed to trick an administrator into clicking UI controls, potentially reconfiguring parts of the Quay instance. Affected: Quay (config-editor). Root cause: improper framing protection enabl...

CVE-2019-3864

CVE-2019-3864 affects all quay-2 versions prior to quay-3.0.0, where the Quay web GUI uses a CSRF token embedded in a POST parameter that is not refreshed per request or on logout, enabling an attacker with a leaked token to access a user’s account. Affected product: Red Hat Quay (Quay web applic...

CVE-2023-4959

CVE-2023-4959 affects Red Hat Quay where the config-editor page is vulnerable to cross-site request forgery (CSRF). Exploitation could coerce a victim’s browser to perform attacker-controlled actions on a Quay instance, including reconfiguring settings and adding admin users. Public sources consi...

CVE-2020-14313

CVE-2020-14313 affects Red Hat Quay prior to 3.3.1. A crafted build trigger in a repository allows disclosure of robot account names and the existence of private repositories within any namespace (information disclosure). The Red Hat advisory RHSA-2020:3525 confirms a security update in Quay 3.3....

CVE-2019-3865

CVE-2019-3865 involves quay-2 with a stored XSS in the super user function. The issue allows injection of scripts via the name field of a service key, which can execute when admin users try to change the name. Documents consistently describe the vulnerability mechanism but do not provide a confir...

CVE-2025-4374

CVE-2025-4374 affects Quay: when an organization acts as a proxy cache and a user/robot pulls an unmapped image, the newly created repository may be granted Admin privileges due to an improper privilege assignment in the proxy cache flow. Impact described as elevated (Admin) access on the new rep...

CVE-2019-3867

The CVE-2019-3867 entry relates to the Quay web application where sessions never expire. Multiple connected sources confirm that an attacker with a valid session can use it to control or delete a user’s container repository on Red Hat Quay 2 and 3. The vulnerability is triggered by persistent, no...

CVE-2024-9683

CVE-2024-9683 affects Red Hat Quay. The vulnerability allows successful authentication when a truncated password is provided, weakening the authentication mechanism and potentially reducing policy effectiveness. Documents consistently describe the issue as a flaw in the login process with a relat...

CVE-2026-2377

CVE-2026-2377 affects mirror-registry’s log export functionality. Authenticated users can trigger a server-side request forgery (SSRF) by supplying a crafted URL, allowing the backend to reach internal network resources. This may expose sensitive information or access to internal systems. The des...

CVE-2026-32590

CVE-2026-32590 affects Red Hat Quay and relates to the handling of resumable container image layer uploads. The vulnerability stems from how intermediate upload data is stored in the database: if this data is tampered with, an attacker could trigger arbitrary code execution on the Quay server (re...

CVE-2026-32591

The CVE-2026-32591 issue affects Red Hat Quay’s Proxy Cache feature. When an organization administrator configures an upstream registry for proxy caching, Quay opens a network connection to the specified registry hostname without validating that it points to a legitimate external service. An atta...

CVE-2026-2376

CVE-2026-2376 affects mirror-registry. The issue arises when an authenticated user supplies malicious web addresses; the application follows redirects without verifying the final destination, enabling requests to be routed to unintended internal or restricted systems. Documented impact is exposur...

CVE-2026-74240

The CVE concerns Red Hat Quay’s JWT validation for federated robot accounts and SSO, where flawed audience verification and insufficient enforcement of azp and sub allow a token from the same identity provider to bypass security boundaries, potentially leading to unauthorized access where audienc...

CVE-2026-74241

Summary: CVE-2026-74241 affects Red Hat Quay’s external LDAP authentication. When LDAP referrals are returned during authentication, the username input isn’t properly escaped, allowing an attacker to inject LDAP filter metacharacters and perform user-existence oracle checks at the referral DN. Th...

CVE-2026-74242

Affects Red Hat Quay. The issue allows a repository administrator to read a notification’s configuration (including webhook URLs, Slack tokens, and email addresses) by knowing or guessing the target notification UUID, and to trigger test notifications for another repository. Root cause: unauthori...

CVE-2026-74247

Red Hat Quay contains a Server-Side Request Forgery (SSRF) vulnerability in its build API , specifically through the archive_url parameter. A user with repository write access and the FEATURE_BUILD_SUPPORT feature enabled can supply a malicious URL, causing the Quay builder to issue requests to i...

CVE-2026-74244

Red Hat Quay is affected by a missing Stripe-Signature header validation in its billing webhook handler at the /webhooks/stripe endpoint. An unauthenticated attacker can send crafted JSON requests to forge billing events, resulting in the unauthorized reset of a namespace build quota to its maxim...

CVE-2026-74243

In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...

CVE-2026-32589

CVE-2026-32589 concerns Red Hat Quay, where an authenticated user with push access to any repository can interfere with in-progress image uploads of other users due to an insecure direct object reference in the blobupload process. The issue enables reading, modification, or cancellation of anothe...

CVE-2026-6848

Summary: CVE-2026-6848 affects Red Hat Quay. The vulnerability allows bypassing the re-authentication prompt for password‑reverification during sensitive operations (e.g., token generation, robot account creation) when a user has a timed‑out session or idle authenticated browser session. This can...

CVE-2026-74245

Red Hat Quay 's exported logs feature contains an authorization flaw that allows an unauthenticated attacker with a valid file ID to download exported action logs. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks . The impact is information disclosure ...