Vulnerabilities

TI-2026-25101 CVE-2026-32590 · GHSA-mvqc-wfv6-7764

Mirror-registry: remote code execution using pickle deserialization

MEDIUM 41

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00537 Published 2026-04-08 Partial fix · 1782177012, 1779822261 +8 CWE-502

TI-2026-25100 CVE-2026-32589 · GHSA-7fjh-cgxv-cjc6

LOW 32

A flaw was found in Red Hat Quay's container image upload process.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00252 Published 2026-04-08 Partial fix · 1782177012, 1779822261 +6 CWE-639

TI-2026-02012 CVE-2026-2377 · GHSA-2c4x-699h-vw5x

LOW 29

A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00412 Published 2026-04-08 Partial fix · 1779822261, 1779811412 +4 CWE-918