← All credits
Red Hat would like to thank meifukun (https://github.com/meifukun) for reporting this issue.
7 vulnerability records and advisories credit this contributor.
CVE-2026-74245
Quay: unauthenticated exported logs download in quay
CVE-2026-74244
Quay: stripe webhook accepts forged events without signature verification in quay
CVE-2026-74247
Quay: ssrf via build archive_url in quay build api
CVE-2026-74243
Quay: unauthenticated secscan notification endpoint in quay when psk is unset
CVE-2026-74240
Quay: jwt claim validation bypasses in quay federated robot and sso authentication
CVE-2026-74241
Quay: ldap referral filter injection in quay external ldap authentication
CVE-2026-74242
Quay: repository notification uuid idor in quay api