CVE-2026-32591

all versions

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream re

5.2MEDIUM

CVE-2026-32590

all versions

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate dat

7.1HIGH

CVE-2026-32589

all versions

A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the

7.4HIGH

CVE-2026-2377

all versions

A flaw was found in mirror-registry. Authenticated users can exploit the log export feature by providing a specially crafted web a

6.5MEDIUM

CVE-2025-4374

<= 3.14.0

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored

6.5MEDIUM

CVE-2024-9683

all versions

A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This

4.8MEDIUM

CVE-2024-5891

all versions

A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to auth

4.2MEDIUM

CVE-2023-4956

all versions

A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user into clickin

6.5MEDIUM

CVE-2023-44487

all versions

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams q

7.5HIGH

CVE-2023-4959

all versions

A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. Du

6.5MEDIUM

CVE-2023-3384

all versions

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend b

5.4MEDIUM

CVE-2020-10735

all versions

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system

7.5HIGH

CVE-2022-2447

all versions

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a

6.6MEDIUM

CVE-2022-1227

all versions

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. O

8.8HIGH

CVE-2021-3762

all versions

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafte

9.8CRITICAL

CVE-2020-27832

>= 3.0.0 and < 3.3.2

A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository'

9.0CRITICAL

CVE-2020-27831

>= 3.0.0 and < 3.3.3

A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for

4.3MEDIUM

CVE-2019-3867

all versions

A vulnerability was found in the Quay web application. Sessions in the Quay web application never expire. An attacker, able to gai

4.1MEDIUM

CVE-2020-14313

< 3.3.1

An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can c

4.3MEDIUM

CVE-2019-3865

all versions

A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers

6.1MEDIUM

CVE-2019-3864

< 3.0.0

A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specifi

8.8HIGH

CVE-2019-10205

all versions

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries i

6.3MEDIUM

CVE-2019-9518

all versions

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker se

7.5HIGH

CVE-2019-9517

all versions

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. Th

7.5HIGH

CVE-2019-9516

all versions

Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stre

6.5MEDIUM

CVE-2019-9515

all versions

Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a s

7.5HIGH

CVE-2019-9514

all versions

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a numb

7.5HIGH

CVE-2019-9513

all versions

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates mul

7.5HIGH

CVE-2019-9511

all versions

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading

7.5HIGH