QU
Product
Quay
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 17Medium 19Low 0
Watch
Add Quay to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2447 | 6.6 | Sep 1 | A flaw was found in Keystone Affected: 3.0.0 |
| CVE-2026-74241 | 6.5 | Aug 14 | Quay: ldap referral filter injection in quay external ldap authentication Affected: 3.0.0 |
| CVE-2026-2377 | 6.5 | Apr 8 | Mirror-registry: quay: quay: server-side request forgery via log export functionality Affected: 3.0.0 |
| CVE-2025-4374 | 6.5 | May 6 | A flaw was found in Quay Affected: through 3.14.0 |
| CVE-2023-4959 | 6.5 | Sep 15 | A flaw was found in Quay Affected: 3.0.0 |
| CVE-2019-9516 | 6.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service Affected: 3.0.0 |
| CVE-2019-10205 | 6.3 | Jan 2 | A flaw was found in the way Red Hat Quay stores robot account tokens in plain text Affected: 3.0.0 |
| CVE-2019-3865 | 6.1 | Jun 22 | A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay Affected: 2.0.0 |
| CVE-2026-32591 | 5.5 | Apr 8 | Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration Affected: 3.0.0 |
| CVE-2026-74240 | 5.4 | Aug 14 | Quay: jwt claim validation bypasses in quay federated robot and sso authentication Affected: 3.0.0 |
| CVE-2026-2376 | 5.4 | Mar 12 | Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface Affected: 3.0.0 |
| CVE-2023-3384 | 5.4 | Jul 24 | A flaw was found in the Quay registry Affected: 3.0.0 |
| CVE-2024-9683 | 5.3 | Oct 17 | A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided Affected: 3.0.0 |
| CVE-2026-74242 | 4.4 | Aug 14 | Quay: repository notification uuid idor in quay api Affected: 3.0.0 |
| CVE-2023-4956 | 4.3 | Nov 7 | A flaw was found in Quay Affected: 3.0.0 |
| CVE-2020-27831 | 4.3 | May 27 | A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications Affected: 3.0.0 before 3.3.3 |
| CVE-2020-14313 | 4.3 | Aug 11 | An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1 Affected: before 3.3.1 |
| CVE-2024-5891 | 4.2 | Jun 12 | A vulnerability was found in Quay Affected: 3.0.0 |
| CVE-2019-3867 | 4.1 | Mar 18 | A vulnerability was found in the Quay web application Affected: 2.0.0; 3.0.0 |
Showing 19