mirror registry for Red Hat OpenShift 2 vulnerabilities

2 known vulnerabilities in mirror registry for Red Hat OpenShift 2 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  quay: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-110697Nov 11, 2026Project Quay

  A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and

• 9.8 Critical severity

  quay: Improper Validation of Specified Type of Input

  CVE-2026-123710Nov 11, 2026Project Quay

  A flaw was found in Red Hat Quay. An unauthenticated client can obtain an anonymous registry token with an audience it controls, present that token to the service key rotation endpoint, and install its own approved signing key with no expiry. Registry tokens s