# mirror registry for Red Hat OpenShift.

Every CVE that names mirror registry for Red Hat OpenShift among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable](https://agentprime.io/advisories/CVE-2026-85471.md)
  `CVE-2026-85471` · CVE record: Red Hat mirror registry for Red Hat OpenShift and 2 more · CVSS 6.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration](https://agentprime.io/advisories/CVE-2026-32591.md)
  `CVE-2026-32591` · CVE record: Red Hat Red Hat Quay 3.10 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Mirror-registry: remote code execution using pickle deserialization](https://agentprime.io/advisories/CVE-2026-32590.md)
  `CVE-2026-32590` · CVE record: Red Hat mirror registry for Red Hat OpenShift 2.0 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2026 · Tags: Insecure deserialization
- [Mirror-registry: quay: insecure direct object reference in blobupload](https://agentprime.io/advisories/CVE-2026-32589.md)
  `CVE-2026-32589` · CVE record: Red Hat mirror registry for Red Hat OpenShift 2.0 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Apr 2026 · Tags: Broken access control
- [Mirror-registry: openshift mirror registry: user enumeration via authentication error messages](https://agentprime.io/advisories/CVE-2025-14243.md)
  `CVE-2025-14243` · CVE record: Red Hat mirror registry for Red Hat OpenShift and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Information disclosure
- [Mirror-registry: quay: quay: server-side request forgery via log export functionality](https://agentprime.io/advisories/CVE-2026-2377.md)
  `CVE-2026-2377` · CVE record: Red Hat Red Hat Quay 3.10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface](https://agentprime.io/advisories/CVE-2026-2376.md)
  `CVE-2026-2376` · CVE record: Red Hat mirror registry for Red Hat OpenShift and 2 more · CVSS 4.9 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: Open redirect
- [Mirror-registry: host header injection in mirror-registry](https://agentprime.io/advisories/CVE-2025-7777.md)
  `CVE-2025-7777` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Open redirect
- [Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry](https://agentprime.io/advisories/CVE-2025-3528.md)
  `CVE-2025-3528` · CVE record: Red Hat MIRROR-REGISTRY-2.0-RHEL-8 and 1 more · CVSS 8.2 High · Not analysed yet · Published 9 May 2025 · Tags: Broken access control
- [Mirror-registry: database user and password stored in plain-text](https://agentprime.io/advisories/CVE-2024-3624.md)
  `CVE-2024-3624` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 7.3 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256
- [Mirror-registry: redis password stored in plain-text](https://agentprime.io/advisories/CVE-2024-3625.md)
  `CVE-2024-3625` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 7.3 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256
- [Mirror-registry: default database secret key stored in plain-text on initial configuration file](https://agentprime.io/advisories/CVE-2024-3623.md)
  `CVE-2024-3623` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 6.5 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256
- [Mirror-registry: plain-text default csrf secret key](https://agentprime.io/advisories/CVE-2024-3622.md)
  `CVE-2024-3622` · CVE record: Red Hat mirror registry for Red Hat OpenShift · CVSS 8.8 High · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-256

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=mirror-registry-for-red-hat-openshift>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/mirror-registry-for-red-hat-openshift/>. Everything for agents: <https://agentprime.io/llms.txt>.