What’s Vulnerable › Products

Red Hat Quay 3 vulnerabilities

56 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your Red Hat Quay 3 version is affected

Exploited Red Hat Quay 3 vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Red Hat Quay 3 vulnerabilities

• CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
• CVE-2026-85471 — Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable (CVSS 6.4)
• CVE-2026-109195 — Quay: repository auto-prune policy uuid idor in quay api (CVSS 3.1)
• CVE-2026-109194 — Quay: build trigger uuid idor in quay api (CVSS 6.4)
• CVE-2026-105447 — Quay: quay: global read-only superuser can access build trigger write credentials (CVSS 5.5)
• CVE-2026-102576 — Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page (CVSS 4.2)
• CVE-2026-102295 — Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter (CVSS 5.4)
• CVE-2026-85469 — Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope (CVSS 8.0)
• CVE-2026-79705 — Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers (CVSS 4.5)
• CVE-2026-79699 — Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory (CVSS 4.4)
• CVE-2026-74247 — Quay: ssrf via build archive_url in quay build api (CVSS 7.1)
• CVE-2026-74245 — Quay: unauthenticated exported logs download in quay (CVSS 7.5)
• CVE-2026-74244 — Quay: stripe webhook accepts forged events without signature verification in quay (CVSS 7.5)
• CVE-2026-74243 — Quay: unauthenticated secscan notification endpoint in quay when psk is unset (CVSS 8.2)
• CVE-2026-74242 — Quay: repository notification uuid idor in quay api (CVSS 4.4)
• CVE-2026-74241 — Quay: ldap referral filter injection in quay external ldap authentication (CVSS 6.5)
• CVE-2026-74240 — Quay: jwt claim validation bypasses in quay federated robot and sso authentication (CVSS 5.4)
• CVE-2026-19519 — Claircore: claircore: denial of service via unchecked type assertion in rpm header parser (CVSS 4.3)
• CVE-2026-16910 — Quay: ssrf in red hat quay notification webhooks (slack/generic) (CVSS 5.5)
• CVE-2026-16254 — Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser (CVSS 4.3)
• CVE-2026-44495 — Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (CVSS 7.7)
• CVE-2026-11569 — Quay: quay: stored xss via filedrop svg upload (CVSS 5.4)
• CVE-2026-10078 — Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring (CVSS 2.7)
• CVE-2026-10052 — Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints (CVSS 4.1)
• CVE-2026-6848 — Quay: red hat quay: authentication bypass allows privileged actions without valid credentials (CVSS 8.1)