Known vulnerabilities in mirror registry for Red Hat OpenShift 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-85471	A flaw was found in Quay	6.4 Medium	Oct 12, 2026
CVE-2026-15927	A flaw was found in Red Hat Quay's repository-level mirror configuration feature	6.8 Medium	Jul 21, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-32591	A flaw was found in Red Hat Quay's Proxy Cache configuration feature	5.2 Medium	Apr 8, 2026
CVE-2026-32590	A flaw was found in Red Hat Quay's handling of resumable container image layer uploads	7.1 High	Apr 8, 2026
CVE-2026-32589	A flaw was found in Red Hat Quay's container image upload process	7.4 High	Apr 8, 2026
CVE-2025-14243	A flaw was found in the OpenShift Mirror Registry	5.3 Medium	Apr 8, 2026
CVE-2026-2377	A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift	6.5 Medium	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-2376	A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended…	4.9 Medium	Mar 12, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026

Other Red Hat products