RH
Product
Red Hat Quay 3.15
by Red Hat · last CVE Jul 29, 2026
60
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 35Medium 8Low 1
Watch

Add Red Hat Quay 3.15 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15927
6.8
1%
Jul 21
Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation
Affected: All versions, or not specified
CVE-2026-42041
6.5
1%
Apr 24
Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy
Affected: All versions, or not specified
CVE-2026-2377
6.5
0%
Apr 8
Mirror-registry: quay: quay: server-side request forgery via log export functionality
Affected: All versions, or not specified
CVE-2026-26007
6.5
0%
Feb 10
cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves
Affected: All versions, or not specified
CVE-2026-39828
6.3
0%
May 22
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Affected: All versions, or not specified
CVE-2026-32591
5.5
0%
Apr 8
Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
Affected: All versions, or not specified
CVE-2026-24049
5.5
0%
Jan 22
wheel Allows Arbitrary File Permission Modification via Path Traversal
Affected: All versions, or not specified
CVE-2026-39835
5.3
1%
May 22
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Affected: All versions, or not specified
Showing 8