Skip to content
OpenAdvisories

Vendor

Project Quay

3 known vulnerabilities.

Products

quay 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-110697 Public exploit

    Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

    A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and…

    Red Hat Project Quay mirror registry for Red Hat OpenShift 2 Red Hat Quay 3.10 Ubuntu
  • Critical 9.8
    CVE-2026-123710

    Quay: red hat quay: unauthenticated registry signing-key takeover via service key rotation

    A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens …

    Red Hat Project Quay mirror registry for Red Hat OpenShift 2 Red Hat Quay 3.9