PatchTheCVEquay vulnerabilities and fixes
Recent CVEs affecting quay, with upgrade or downgrade steps. 8 tracked.
quay has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-08-14. Highest priority: CVE-2026-74243 (score 43/100).
- CVE-2026-6848 MEDIUM 5.4 DOWNGRADE A flaw was found in Red Hat Quay
- CVE-2026-74245 MEDIUM 5.9 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's exported logs feature
- CVE-2026-74244 MEDIUM 5.9 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's Stripe billing webhook handler
- CVE-2026-74247 MEDIUM 4.2 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay
- CVE-2026-74243 MEDIUM 6.5 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay
- CVE-2026-74240 MEDIUM 5.4 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sig
- CVE-2026-74241 MEDIUM 4.8 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handli
- CVE-2026-74242 MEDIUM 5.3 MITIGATE DOWNGRADE A flaw was found in Red Hat Quay
FAQ
How do I fix quay vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quay being exploited right now?
None of the tracked quay CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quay CVE should I patch first?
CVE-2026-74243 currently ranks highest (43/100): A flaw was found in Red Hat Quay.