Red Hat mirror registry for Red Hat OpenShift vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20252
3. 20267

Newest CVEs

• CVE-2026-85471

  Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable

  Red Hat · mirror registry for Red Hat OpenShift

  Medium6.4
• CVE-2026-32591

  Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

  Red Hat · Red Hat Quay 3.10

  Medium5.2
• CVE-2026-32590

  Mirror-registry: remote code execution using pickle deserialization

  Red Hat · mirror registry for Red Hat OpenShift 2.0

  High7.1
• CVE-2026-32589

  Mirror-registry: quay: insecure direct object reference in blobupload

  Red Hat · mirror registry for Red Hat OpenShift 2.0

  High7.4
• CVE-2025-14243

  Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

  Red Hat · mirror registry for Red Hat OpenShift

  Medium5.3
• CVE-2026-2377

  Mirror-registry: quay: quay: server-side request forgery via log export functionality

  Red Hat · Red Hat Quay 3.10

  Medium6.5
• CVE-2026-2376

  Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface

  Red Hat · mirror registry for Red Hat OpenShift

  Medium4.9
• CVE-2025-7777

  Mirror-registry: host header injection in mirror-registry

  Red Hat · mirror registry for Red Hat OpenShift

  Medium6.5
• CVE-2025-3528

  Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry

  mirror-registry

  High8.2
• CVE-2024-3624

  Mirror-registry: database user and password stored in plain-text

  mirror-registry

  High7.3