https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T05:56:02.519490+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-vg7f-4c95-cv88 GHSA-vg7f-4c95-cv88 2026-11-14T05:56:02.521142+00:00

A flaw was found in Red Hat Quay. The v1 registry API error handler reflects the attacker-supplied image_id path segment in a response served as text/html, allowing a reflected cross-site scripting (XSS) attack. By tricking a user into visiting a specially crafted URL, a remote attacker can execute arbitrary JavaScript in the victim's browser within the Quay origin, potentially compromising the user's session.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4565 WID-SEC-W-2026-4565 — Red Hat Quay: Mehrere Schwachstellen 2026-11-14T05:56:02.521229+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Quay ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.