<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: red-hat-openshift-update-service</title><description>Every new CVE for red-hat-openshift-update-service.</description><link>https://agentprime.io/</link><item><title>CVE-2026-74247: Quay: ssrf via build archive_url in quay build api</title><link>https://agentprime.io/advisories/CVE-2026-74247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74247/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74245: Quay: unauthenticated exported logs download in quay</title><link>https://agentprime.io/advisories/CVE-2026-74245/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74245/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74244: Quay: stripe webhook accepts forged events without signature verification in quay</title><link>https://agentprime.io/advisories/CVE-2026-74244/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74244/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74243: Quay: unauthenticated secscan notification endpoint in quay when psk is unset</title><link>https://agentprime.io/advisories/CVE-2026-74243/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74243/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74242: Quay: repository notification uuid idor in quay api</title><link>https://agentprime.io/advisories/CVE-2026-74242/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74242/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74241: Quay: ldap referral filter injection in quay external ldap authentication</title><link>https://agentprime.io/advisories/CVE-2026-74241/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74241/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74240: Quay: jwt claim validation bypasses in quay federated robot and sso authentication</title><link>https://agentprime.io/advisories/CVE-2026-74240/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74240/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 22:43:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16910: Quay: ssrf in red hat quay notification webhooks (slack/generic)</title><link>https://agentprime.io/advisories/CVE-2026-16910/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16910/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Jul 2026 06:36:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-57854: Osus-operator: privilege escalation via excessive /etc/passwd permissions</title><link>https://agentprime.io/advisories/CVE-2025-57854/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57854/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 13:55:06 GMT</pubDate><category>CVE</category></item></channel></rss>