Vulnerabilities

TI-2026-52033 CVE-2026-74247 · GHSA-rg7f-fcx2-cjw3

Quay: ssrf via build archive_url in quay build api

LOW 31

A flaw was found in Red Hat Quay.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00245 Published 2026-08-14 Fix deferred CWE-918

TI-2026-52032 CVE-2026-74245 · GHSA-jr6g-vw27-98vc

LOW 33

A flaw was found in Red Hat Quay's exported logs feature.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2026-08-14 No fix listed CWE-306

TI-2026-52031 CVE-2026-74244 · GHSA-fgq8-mwjv-6335

LOW 32

A flaw was found in Red Hat Quay's Stripe billing webhook handler.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0023 Published 2026-08-14 Fix deferred CWE-347

TI-2026-52030 CVE-2026-74243 · GHSA-vxqv-j38r-6jmm

MEDIUM 42

A flaw was found in Red Hat Quay.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00463 Published 2026-08-14 Fix deferred CWE-306

TI-2026-52029 CVE-2026-74242 · GHSA-9hvx-vhh3-2359

LOW 24

A flaw was found in Red Hat Quay.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00334 Published 2026-08-14 Fix deferred CWE-639

TI-2026-52028 CVE-2026-74241 · GHSA-x5cw-v6mp-3p93

LOW 29

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0031 Published 2026-08-14 Fix deferred CWE-90

TI-2026-52027 CVE-2026-74240 · GHSA-3vf7-35c7-wgcv

LOW 24

A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00292 Published 2026-08-14 No fix listed CWE-287

TI-2025-35723 CVE-2025-57854 · GHSA-28p4-crp9-2q2x

LOW 29

A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00151 Published 2026-04-08 No fix listed CWE-276