Known Vulnerabilities for Quay by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Quay" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32591 json | A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstre... | Not Provided | 2026-04-08 | 2026-05-28 |
| CVE-2026-32590 json | A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediat... | Not Provided | 2026-04-08 | 2026-06-02 |
| CVE-2026-32589 json | A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository o... | Not Provided | 2026-04-08 | 2026-06-02 |
| CVE-2026-10517 json | A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest layer d... | Not Provided | 2026-06-01 | 2026-06-01 |
| CVE-2026-10078 json | A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifica... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-10052 json | A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can expl... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-6848 json | A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-2377 json | Not Provided | 2026-04-08 | 2026-05-28 | |
| CVE-2026-2376 json | Not Provided | 2026-03-12 | 2026-06-02 | |
| CVE-2023-4959 json | A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an applicatio... | 6.5 - MEDIUM | 2023-09-15 | 2023-11-07 |