https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 01:05:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-348831 EUVD-2026-348831 https://cve.radiocsirt.org/vuln/euvd-2026-348831 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3384 <p>A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image. This flaw allows an attacker to publish a malicious image to a public registry containing a script that can be executed via Cross-site scripting (XSS).</p> <p>A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image. This flaw allows an attacker to publish a malicious image to a public registry containing a script that can be executed via Cross-site scripting (XSS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3384 https://cve.radiocsirt.org/vuln/ghsa-jgpj-6chm-qj8q <p>A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image. This flaw allows an attacker to publish a malicious image to a public registry containing a script that can be executed via Cross-site scripting (XSS).</p> <p>A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image. This flaw allows an attacker to publish a malicious image to a public registry containing a script that can be executed via Cross-site scripting (XSS).</p> https://cve.radiocsirt.org/vuln/ghsa-jgpj-6chm-qj8q https://cve.radiocsirt.org/vuln/gsd-2023-3384 gsd-2023-3384 https://cve.radiocsirt.org/vuln/gsd-2023-3384 https://cve.radiocsirt.org/vuln/rhba-2024:11113 <p>quay: stored cross site scripting</p> <p>quay: stored cross site scripting</p> https://cve.radiocsirt.org/vuln/rhba-2024:11113