Product by Red Hat

    Red Hat Quay 3.17

    5 known vulnerabilities in Red Hat Quay 3.17 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Quay 3.17 (Red Hat)
    HighCVE-2026-18255

    Quay: quay: global read-only superuser can view robot account tokens

    also in 8 other products

    		7.2
    MediumCVE-2026-15927

    Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation

    also in 7 other products

    		6.8
    HighCVE-2026-32590

    Mirror-registry: remote code execution using pickle deserialization

    also in 11 other products

    		7.1
    HighCVE-2026-32589

    Mirror-registry: quay: insecure direct object reference in blobupload

    also in 9 other products

    		7.4
    MediumCVE-2026-32591

    Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

    also in 12 other products

    		5.2

    All products by Red Hat