Red Hat Security Advisory

RHSA-2023:7341

Red Hat Quay security update

Released 2023-11-30 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-09729 CVE-2023-23931 · GHSA-w7pp-m8wf-vj6r

MEDIUM 62

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01301 Published 2023-02-07 Partial fix · 39.0.1 CWE-754

TI-2023-10880 CVE-2023-25577 · GHSA-xg9f-g7g7-2323

MEDIUM 42

Werkzeug is a comprehensive WSGI web application library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0142 Published 2023-02-14 Partial fix · 2.2.3 CWE-770

TI-2023-14640 CVE-2023-30861 · GHSA-m2qf-hxjv-5gpq

LOW 35

Flask is a lightweight WSGI web application framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0125 Published 2023-05-02 Partial fix · 2.3.2, 2.2.5 CWE-539