Known vulnerabilities in Red Hat Quay 3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-114236	Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers	3.3 Low	Oct 21, 2026
CVE-2026-85471	A flaw was found in Quay	6.4 Medium	Oct 12, 2026
CVE-2026-109194	A flaw was found in Red Hat Quay	6.4 Medium	Oct 12, 2026
CVE-2026-109195	A flaw was found in Quay	3.1 Low	Oct 12, 2026
CVE-2026-105447	A flaw was found in Quay	5.5 Medium	Oct 5, 2026
CVE-2026-102576	A flaw was found in Quay	4.2 Medium	Oct 5, 2026
CVE-2026-102295	A flaw was found in Quay	5.4 Medium	Oct 5, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-85469	A flaw was found in quay-builder-qemu	8.0 High	Sep 16, 2026
CVE-2026-79699	Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory	4.4 Medium	Sep 15, 2026
CVE-2026-79705	Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers	4.5 Medium	Sep 15, 2026
CVE-2026-74247	A flaw was found in Red Hat Quay	4.2 Medium	Aug 14, 2026
CVE-2026-74245	A flaw was found in Red Hat Quay's exported logs feature	5.9 Medium	Aug 14, 2026
CVE-2026-74244	A flaw was found in Red Hat Quay's Stripe billing webhook handler	5.9 Medium	Aug 14, 2026
CVE-2026-74243	A flaw was found in Red Hat Quay	6.5 Medium	Aug 14, 2026
CVE-2026-74242	A flaw was found in Red Hat Quay	5.3 Medium	Aug 14, 2026
CVE-2026-74241	A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling	4.8 Medium	Aug 14, 2026
CVE-2026-74240	A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO)…	5.4 Medium	Aug 14, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-19519	A flaw was found in claircore's RPM package scanner	4.3 Medium	Aug 11, 2026
CVE-2026-18255	A flaw was found in Quay	7.2 High	Jul 29, 2026
CVE-2026-16910	A flaw was found in Red Hat Quay's notification webhook feature	5.5 Medium	Jul 24, 2026
CVE-2026-15927	A flaw was found in Red Hat Quay's repository-level mirror configuration feature	6.8 Medium	Jul 21, 2026
CVE-2026-16254	A flaw was found in claircore's apk package scanner	4.3 Medium	Jul 20, 2026

Other Red Hat products