Red Hat Red Hat Quay 3.18

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-18255Quay: quay: global read-only superuser can view robot account tokensHIGH 7.20.8 %
CVE-2026-32591Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configurationMEDIUM 5.50.3 %
CVE-2026-32590Mirror-registry: remote code execution using pickle deserializationHIGH 8.80.5 %