openshift/mirror-registry-rhel8 vulnerabilities
CVEs whose affected-version data names the openshift/mirror-registry-rhel8 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-85471Medium· 6.4A flaw was found in Quay
A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery (SSRF) vulnerability. This allows the Quay application to be trick…
▾ SunlitRed Hat · openshift/mirror-registry-rhel8EPSS 0.21%via NVD
CVE-2026-15927Medium· 6.8A flaw was found in Red Hat Quay's repository-level mirror configuration feature
A flaw was found in Red Hat Quay's repository-level mirror configuration feature. The POST and PUT handlers in endpoints/api/mirror.py accept an external_reference parameter without SSRF validation, unlike the organization-level mirror h…
▾ SunlitRed Hat · quay/quay-rhel8EPSS 0.60%via NVD