Red Hat Red Hat Quay 3
31 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-85471 | | Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable | MEDIUM 6.4 | 0.2 % | ||
| CVE-2026-109195 | | Quay: repository auto-prune policy uuid idor in quay api | LOW 3.1 | 0.2 % | ||
| CVE-2026-109194 | | Quay: build trigger uuid idor in quay api | MEDIUM 6.4 | 0.2 % | ||
| CVE-2026-105447 | | Quay: quay: global read-only superuser can access build trigger write credentials | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-102576 | | Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page | MEDIUM 4.2 | 0.3 % | ||
| CVE-2026-102295 | | Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-85469 | | Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope | HIGH 8.0 | 0.5 % | ||
| CVE-2026-79699 | | Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-79705 | | Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers | MEDIUM 4.5 | 0.4 % | ||
| CVE-2026-74247 | | Quay: ssrf via build archive_url in quay build api | HIGH 7.1 | 0.2 % | ||
| CVE-2026-74245 | | Quay: unauthenticated exported logs download in quay | HIGH 7.5 | 0.4 % | ||
| CVE-2026-74244 | | Quay: stripe webhook accepts forged events without signature verification in quay | HIGH 7.5 | 0.2 % | ||
| CVE-2026-74243 | | Quay: unauthenticated secscan notification endpoint in quay when psk is unset | HIGH 8.2 | 0.5 % | ||
| CVE-2026-74242 | | Quay: repository notification uuid idor in quay api | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-74241 | | Quay: ldap referral filter injection in quay external ldap authentication | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-74240 | | Quay: jwt claim validation bypasses in quay federated robot and sso authentication | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-19730 | | Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives | MEDIUM 4.2 | 0.1 % | ||
| CVE-2026-19519 | | Claircore: claircore: denial of service via unchecked type assertion in rpm header parser | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-16910 | | Quay: ssrf in red hat quay notification webhooks (slack/generic) | MEDIUM 5.5 | 0.3 % | ||
| CVE-2026-16254 | | Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-11569 | | Quay: quay: stored xss via filedrop svg upload | MEDIUM 5.4 | 0.1 % | ||
| CVE-2026-10078 | | Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring | LOW 2.7 | 0.2 % | ||
| CVE-2026-10052 | | Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints | MEDIUM 4.1 | 0.2 % | ||
| CVE-2026-6848 | | Quay: red hat quay: authentication bypass allows privileged actions without valid credentials | HIGH 8.1 | 0.3 % | ||
| CVE-2026-2376 | | Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-4374 | corrigé en v3.14.2-1 | Quay: incorrect privilege assignment | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-9683 | | Quay: quay allows successful authentication with trucated version of the password | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-5891 | | Quay: unauthorized user may authenticate via oauth application token | MEDIUM 4.2 | 0.2 % | ||
| CVE-2023-4956 | | Quay: clickjacking on config-editor page severity | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-4959 | | Quay: cross-site request forgery (csrf) on config-editor page | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-3384 | corrigé en v3.9.9-1 | Quay: stored cross site scripting | MEDIUM 5.4 | 0.5 % |