Mirror registry for red hat openshift

This hub aggregates every CVE we track for Mirror registry for red hat openshift, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Mirror registry for red hat openshift.

• CVE-2026-32591Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration5.2Apr 8, 2026
• CVE-2026-32590Mirror-registry: remote code execution using pickle deserialization7.1Apr 8, 2026
• CVE-2026-32589Mirror-registry: quay: insecure direct object reference in blobupload7.4Apr 8, 2026
• CVE-2025-14243Mirror-registry: openshift mirror registry: user enumeration via authentication error messages5.3Apr 8, 2026
• CVE-2026-2377Mirror-registry: quay: quay: server-side request forgery via log export functionality6.5Apr 8, 2026
• CVE-2026-32281Inefficient policy validation in crypto/x5097.5Apr 8, 2026
• CVE-2026-32280Unexpected work during chain building in crypto/x5097.5Apr 8, 2026
• CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5Apr 8, 2026
• CVE-2026-33810Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2Apr 8, 2026
• CVE-2026-2376Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface4.9Mar 12, 2026
• CVE-2025-66471urllib3 Streaming API improperly handles highly compressed data7.5Dec 5, 2025
• CVE-2025-66418urllib3 allows an unbounded number of links in the decompression chain7.5Dec 5, 2025
• CVE-2025-7777Mirror-registry: host header injection in mirror-registry6.5Aug 20, 2025
• CVE-2025-3528Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry8.2May 9, 2025
• CVE-2024-3625Mirror-registry: redis password stored in plain-text7.3Apr 25, 2024