Known vulnerabilities in Quay

Software: Quay
Software CPE: cpe:2.3:a:red_hat:quay:*:*:*:*:*:*:*:*
Total vulnerabilities: 115
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Quay Quay is affected by 115 known vulnerabilities: 40 high, 52 medium, 23 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119132 - Uncontrolled Recursion
CVE-2025-66031
CWE-674 Medium
No
No
3.16.1 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU119131 - Interpretation Conflict
CVE-2025-12816
CWE-436 Medium
No
No
3.16.1 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU118717 - Improper input validation
CVE-2025-47913
CWE-20 Low
No
No
3.12.0, 3.13.10, 3.16.0 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
3.16.0 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU117881 - Resource exhaustion
CVE-2025-61920
CWE-400 Medium
No
No
3.9.0, 3.12.0, 3.13.10 31.10.2025 SB2025103163
SB2025103166
SB2025112761
and 3 more
#VU117879 - Incorrect Authorization
CVE-2025-59420
CWE-863 High
No
No
3.9.0, 3.12.0, 3.13.10 31.10.2025 SB2025103162
SB2025112761
SB20251210182
and 2 more
#VU115751 - Resource exhaustion
CVE-2025-59375
CWE-400 Medium
No
No
3.16.1 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 108 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754
CWE-770 Medium
Available
No
3.16.0 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
3.9.0 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Available
No
3.9.0 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
3.9.0, 3.12.0, 3.13.10, 3.16.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861
CWE-200 Medium
No
No
3.10.0 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU72339 - Resource exhaustion
CVE-2023-25577
CWE-400 Medium
No
No
3.10.0 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU72036 - Error Handling
CVE-2023-23931
CWE-388 Low
No
No
3.10.0 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 68 more
#VU56930 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-3762
CWE-22 Medium
No
No
3.5.7 29.09.2021 SB2021092914
SB2021092915
#VU49393 - Improper Authorization
CVE-2020-27831
CWE-285 Medium
No
No
3.3.3 12.01.2021 SB2021011210
#VU32958 - Improper input validation
CVE-2020-9802
CWE-20 High
Available
No
3.3.3 02.08.2020 SB2020071482
SB2020072610
SB2020070940
and 14 more
#VU26430 - Memory corruption
CVE-2020-3899
CWE-119 High
No
No
3.3.3 27.03.2020 SB2020032715
SB2020032719
SB2020042823
and 12 more
#VU25861 - NULL Pointer Dereference
CVE-2020-9327
CWE-476 Low
No
No
3.3.3 10.03.2020 SB2020022121
SB2020031502
SB2020110913
and 15 more
#VU25631 - Resource Management Errors
CVE-2020-8492
CWE-399 Medium
No
No
3.3.3 26.02.2020 SB2020013016
SB2020030201
SB2020051503
and 25 more


Showing elements 1 - 20 out of 115