redhat quay vulnerabilities in 2022, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 7.5CVE-2020-10735EPSS 4.5%2022-09-09

   A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.f…

2. 6.6CVE-2022-2447EPSS 0.7%2022-09-01

   A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly…

3. 8.8CVE-2022-1227EPSS 4.2%2022-04-29

   A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'pod…

4. 9.8CVE-2021-3762EPSS 4.8%2022-03-03

   A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentiall…