Known Vulnerabilities for Quay by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Quay" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32591 json | A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstre... | Not Provided | 2026-04-08 | 2026-04-10 |
| CVE-2026-32590 json | A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediat... | Not Provided | 2026-04-08 | 2026-04-10 |
| CVE-2026-32589 json | A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository o... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-6848 json | A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-2377 json | Not Provided | 2026-04-08 | 2026-04-21 | |
| CVE-2023-44487 json | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many stre... | 7.5 - HIGH | 2023-10-10 | 2024-02-02 |
| CVE-2023-4959 json | A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an applicatio... | 6.5 - MEDIUM | 2023-09-15 | 2023-11-07 |
| CVE-2023-4956 json | A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user into cl... | 4.3 - MEDIUM | 2023-11-07 | 2023-11-15 |
| CVE-2023-3384 json | A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and back... | 5.4 - MEDIUM | 2023-07-24 | 2023-11-07 |
| CVE-2022-2447 json | A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy sa... | 6.6 - MEDIUM | 2022-09-01 | 2022-10-01 |