AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-74242

Red Hat Quay: information disclosure

Red Hat

CVE-2026-74242 · Published Aug 14, 2026 · updated Aug 20, 2026

Medium5.3
No fix yet
Red Hat advisory

A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier (UUID), can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability also allows them to trigger test notifications for another repository. This could lead to unauthorized information disclosure and potential misuse of notification services.

Affected versions

PackageAffectedFixed in
Red Hat OpenShift Update Service
Product
all versionsNo fix yet
Red Hat Quay 3
Product
all versionsNo fix yet
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-639

More Red Hat advisories

All Red Hat