OU
Product
Openshift Update Service
8
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Openshift Update Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74243 | 8.2 | Aug 14 | Quay: unauthenticated secscan notification endpoint in quay when psk is unset Affected: All versions, or not specified |
| CVE-2026-74245 | 7.5 | Aug 14 | Quay: unauthenticated exported logs download in quay Affected: All versions, or not specified |
| CVE-2026-74244 | 7.5 | Aug 14 | Quay: stripe webhook accepts forged events without signature verification in quay Affected: All versions, or not specified |
| CVE-2026-74247 | 7.1 | Aug 14 | Quay: ssrf via build archive_url in quay build api Affected: All versions, or not specified |
| CVE-2026-74241 | 6.5 | Aug 14 | Quay: ldap referral filter injection in quay external ldap authentication Affected: All versions, or not specified |
| CVE-2025-57854 | 6.4 | Apr 8 | Osus-operator: privilege escalation via excessive /etc/passwd permissions Affected: All versions, or not specified |
| CVE-2026-74240 | 5.4 | Aug 14 | Quay: jwt claim validation bypasses in quay federated robot and sso authentication Affected: All versions, or not specified |
| CVE-2026-74242 | 4.4 | Aug 14 | Quay: repository notification uuid idor in quay api Affected: All versions, or not specified |
Showing 8