quay has 1 CVE on record. The median CVSS is 5.8 (medium).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 5.8
Publish → KEV: —
Last 90 days: 0 prev 1

Products

github.com/quay/claircore 1

Follow quay:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-10517Medium· 5.8Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints32

quay vulnerabilities

CVEs affecting quay, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-10517Medium· 5.8

Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints

Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints

▾ Sunlitquay · github.com/quay/claircorevia OSV

quay vulnerabilities (CVEs) · VulnSea