Known Vulnerabilities for Red Hat Quay 3 by Red Hat
Listed below are 10 of the newest known vulnerabilities associated with "Red Hat Quay 3" by "Red Hat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109195 json | A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, le... | Not Provided | 2026-10-12 | 2026-10-14 |
| CVE-2026-109194 json | A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails to verify whethe... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-105447 json | A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration det... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-102576 json | A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-sit... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-102295 json | A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker t... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-85471 json | A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notificati... | Not Provided | 2026-10-12 | 2026-10-14 |
| CVE-2026-85469 json | A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-man... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-74247 json | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-74245 json | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exp... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74244 json | A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to f... | Not Provided | 2026-08-14 | 2026-08-17 |