quay
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-9683 | 3.8.14 | Quay: quay allows successful authentication with trucated version of the password | MEDIUM 5.3 | 0.3 % | ||
| CVE-2020-27832 | quay 3.3.2 | A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notifica | CRITICAL 9.0 | 0.9 % | ||
| CVE-2020-27831 | Quay 3.3.3 | A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository | MEDIUM 4.3 | 0.5 % | ||
| CVE-2019-3867 | As shipped in Red Hat Quay 2 and 3. | A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gain access t | MEDIUM 4.1 | 0.3 % | ||
| CVE-2020-14313 | Quay versions before 3.3.1 | An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a bu | MEDIUM 4.3 | 0.9 % |