Vulnérabilités de Red Hat Red Hat Quay 3.14

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-18255	A flaw was found in Quay	7.2 Élevée	29 juil. 2026
CVE-2026-15927	A flaw was found in Red Hat Quay's repository-level mirror configuration feature	6.8 Moyenne	21 juil. 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 Élevée	15 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Moyenne	8 avr. 2026
CVE-2026-32591	A flaw was found in Red Hat Quay's Proxy Cache configuration feature	5.2 Moyenne	8 avr. 2026
CVE-2026-32590	A flaw was found in Red Hat Quay's handling of resumable container image layer uploads	7.1 Élevée	8 avr. 2026
CVE-2026-32589	A flaw was found in Red Hat Quay's container image upload process	7.4 Élevée	8 avr. 2026
CVE-2026-2377	A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift	6.5 Moyenne	8 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 Élevée	27 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 Élevée	17 mars 2026
CVE-2026-27962	Authlib is a Python library which builds OAuth and OpenID Connect servers	9.1 Critique	16 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 Élevée	6 mars 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026

Autres produits Red Hat