Skip to content
OpenAdvisories

Package · Ubuntu

dataquay

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-110697

    Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

    A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and…

    Red Hat Project Quay Red Hat OpenShift Update Service Red Hat Quay 3.9 Ubuntu