Vulnerabilities of Red Hat Red Hat Quay 3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-4374	A flaw was found in Quay	6.5 Medium	May 6, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-9683	A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is…	4.8 Medium	Oct 17, 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-5891	A vulnerability was found in Quay	4.2 Medium	Jun 12, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024
CVE-2023-4956	A flaw was found in Quay	6.5 Medium	Nov 7, 2023
CVE-2023-4959	A flaw was found in Quay	6.5 Medium	Sep 15, 2023
CVE-2023-3384	A flaw was found in the Quay registry	5.4 Medium	Jul 24, 2023

Other Red Hat products