Known vulnerabilities in Red Hat Quay 3.16

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 High	May 5, 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Medium	Apr 8, 2026
CVE-2026-32591	A flaw was found in Red Hat Quay's Proxy Cache configuration feature	5.2 Medium	Apr 8, 2026
CVE-2026-32590	A flaw was found in Red Hat Quay's handling of resumable container image layer uploads	7.1 High	Apr 8, 2026
CVE-2026-32589	A flaw was found in Red Hat Quay's container image upload process	7.4 High	Apr 8, 2026
CVE-2026-2377	A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift	6.5 Medium	Apr 8, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 High	Apr 6, 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 High	Mar 26, 2026
CVE-2026-4601	Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the…	8.7 High	Mar 23, 2026
CVE-2026-4599	Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing…	9.1 Critical	Mar 23, 2026
CVE-2026-4598	Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in…	7.5 High	Mar 23, 2026
CVE-2026-4602	Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to…	7.5 High	Mar 23, 2026
CVE-2026-4600	Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via…	7.4 High	Mar 23, 2026

Other Red Hat products