Advisories · Technology
Red Hat Quay 3.18.
Every CVE that names Red Hat Quay 3.18 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Quay: quay: global read-only superuser can view robot account tokens
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Broken access control
- CVSS 5.2 Medium
Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration
- Red Hat Quay 3.10
- Red Hat Quay 3.12
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Mirror-registry: remote code execution using pickle deserialization
- mirror registry for Red Hat OpenShift 2.0
- Red Hat Quay 3.10
- Insecure deserialization