RHSA-2026:22629HighCVSS 8.2

Red Hat Security Advisory: Red Hat Quay 3.12.18

Published
June 2, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (17)

CVE-2026-32281 →CVE-2026-33894 →CVE-2026-42044 →CVE-2026-32282 →CVE-2026-34986 →CVE-2026-39892 →CVE-2026-40895 →CVE-2026-42041 →CVE-2026-42043 →CVE-2025-62718 →CVE-2026-2377 →CVE-2026-32589 →CVE-2026-42033 →CVE-2026-42035 →CVE-2026-32590 →CVE-2026-40192 →CVE-2026-42039 →

📋 Description

CVE-2025-62718 — axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization CVE-2026-2377 — mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32589 — mirror-registry: quay: insecure direct object reference in BlobUpload CVE-2026-32590 — mirror-registry: remote code execution using pickle deserialization CVE-2026-33894 — node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification CVE-2026-34986 — github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object CVE-2026-39892 — cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API CVE-2026-40192 — Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing CVE-2026-40895 — follow-redirects: follow-redirects: Information disclosure via cross-domain redirects CVE-2026-42033 — axios: Axios: HTTP Transport Hijacking via Prototype Pollution CVE-2026-42035 — axios: Axios: Arbitrary HTTP header injection via prototype pollution CVE-2026-42039 — axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data CVE-2026-42041 — axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling CVE-2026-42043 — axios: Axios: NO_PROXY bypass via crafted URL CVE-2026-42044 — axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget

🎯 Affected products29

  • Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:029c3754ef9adb693785cbb90855eac14da6ff7319b581e06fa80a319b4b397f_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:37b54107d51f1aa0aa0bfd02e5373bc5c17fe98521b4a065126fe76a9b5d4a8f_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:8e1fcc9086776db526a1b2fcbb7c068d71e82eef7098b7df0f72d6a7995bcd7e_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/clair-rhel8@sha256:b59d8c379e69debc315b9cad3e155ff2a6e458426b76bb1b6d86e2cf08c56557_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:bfae5410144f3a5b76847634efb9d78407591df98e67f639796e212a4739128b_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:034737d3954911f9371c0422ef1b204ba00546d53febfe55ee704e0df2b57682_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:cfebea8a32ebeec3963d3b41f8161fd65f698c20d1ffa1f03c630d776c612c93_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e289bf320046335ecf1d032c3add538a539b0f8ded8bca56d0a3c4655f712720_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ec3dc9f6eb57ec9dca9ef4c61d3671f2cca32910ca5c7cc37e2f8e1159594fcc_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6530ab268b54cf9a6cd2166dc89ae86b7e908a4ed26301440f69a6ca7af4a4e9_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:002bb098e96b7521e2a9ecc5aac3c4a488d46cd34b10297bde34875101b8d6bc_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:34885b92ee88d400d16f1bc86452d418c79b2f979136614b3887cec67fa353d5_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:4c0fde56c49356b322ce15194f8da85ea16cd2a7a80a6c8e7d38b94e22cc6e8a_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-builder-rhel8@sha256:8745cd1c93673e8b33cd80758d16b96f49f49d28fbfce60a069578cb17baa88c_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:d91c880570c005cb2edcb07d29f8df09504b65710dde2b0c95d17c139c92b777_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:27ab48d03362b795605f841ec15ac20b869e8bd6e69a783d9be7643f6af33a93_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:5195314fca91a9531d77397274098564c8e3271f0a9f3adcc4b65b0dc8e2aa8b_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:65750c25a337679bbecb7ff4e443df5df76f089ce27952203863d80710b15e06_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e6855bb1099a4bb1b0e53d7ee2359edd8f0b35eafd785eae32eeb7a9939eda72_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-bundle@sha256:9da58edb2793b2a2fe559fbf9764c251a1fc19a3062956f39e0f138ebb0efffd_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:124bada0022d71ad1c20aba7350af8625eac26ef81f89154d22a5f7b8d74820e_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:14aa439dcd023927e6d6f27d3695bf99cf0aabe11f4c86f767ef2186bd9b886c_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:9756cfa3d2ed7bcf1c680c9003e0ed90247c4cf8aac020d01ad927058b3b45e1_s390x as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-operator-rhel8@sha256:f8b228501a85e99cc3f3c6af1b8f927c72c5f779ef4db74e4706d2d46042800b_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:6e84443d520fc3f75352783c17e4262db596b6a7b194970f0cb276e52aa7cb26_arm64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:80c3d7a1c4b60d82101d6ab598498977fd7e5e6c3a82be0c44afec6fb84cb45a_ppc64le as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:c8de70845d1b044f955b1bcdab78ea997a665a9322b3fb8635602679292d8978_amd64 as a component of Red Hat Quay 3.12
  • registry.redhat.io/quay/quay-rhel8@sha256:f88e76824ab3d5d3b054bb79c33fc5bf8183238a8bf3e963d978437b0cfa2d69_s390x as a component of Red Hat Quay 3.12

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (20)