Known Vulnerabilities for Quay by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Quay" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105447 json | A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration det... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-102576 json | A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-sit... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-102295 json | A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker t... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-85469 json | A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream `Noelware/docker-man... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-74247 json | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-74245 json | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exp... | Not Provided | 2026-08-14 | 2026-08-20 |
| CVE-2026-74244 json | A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to f... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-74243 json | A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated atta... | Not Provided | 2026-08-14 | 2026-08-18 |
| CVE-2026-74242 json | A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universa... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-74241 json | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDA... | Not Provided | 2026-08-14 | 2026-08-17 |