Skip to content
OpenAdvisories

Vendor

Project Quay

1 known vulnerabilities.

Products

quay 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-4374

    Quay: incorrect privilege assignment

    A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.

    Red Hat Project Quay Red Hat Quay 3 quay