Product by Red Hat
Mirror Registry For Red Hat Openshift
13 known vulnerabilities in Mirror Registry For Red Hat Openshift (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-32590 | Mirror-registry: remote code execution using pickle deserialization | 7.1 | |
| High | CVE-2024-3622 | Mirror-registry: plain-text default csrf secret key | 8.8 | |
| Medium | CVE-2026-85471 | Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable | 6.4 | |
| Medium | CVE-2026-2377 | Mirror-registry: quay: quay: server-side request forgery via log export functionality | 6.5 | |
| High | CVE-2026-32589 | Mirror-registry: quay: insecure direct object reference in blobupload | 7.4 | |
| High | CVE-2025-3528 | Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry | 8.2 | |
| Medium | CVE-2024-3623 | Mirror-registry: default database secret key stored in plain-text on initial configuration file | 6.5 | |
| High | CVE-2024-3624 | Mirror-registry: database user and password stored in plain-text | 7.3 | |
| High | CVE-2024-3625 | Mirror-registry: redis password stored in plain-text | 7.3 | |
| Medium | CVE-2026-32591 | Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration | 5.2 | |
| Medium | CVE-2025-14243 | Mirror-registry: openshift mirror registry: user enumeration via authentication error messages | 5.3 | |
| Medium | CVE-2025-7777 | Mirror-registry: host header injection in mirror-registry | 6.5 | |
| Medium | CVE-2026-2376 | Red Hat mirror registry for Red Hat OpenShift: Open Redirect | 4.9 |