Vendor

    Project Quay

    3 known vulnerabilities in products by Project Quay, 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Project Quay
    CriticalCVE-2026-110697

    Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

    also in 9 other products

    		9.9
    CriticalCVE-2026-123710

    Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation

    also in 10 other products

    		9.8
    MediumCVE-2025-4374

    Quay: incorrect privilege assignment

    also in 2 other products

    		6.5

    Products

    Products by Project Quay
    Quay30