Red Hat Quay, an enterprise container registry, has multiple security vulnerabilities affecting versions before 3.13.5. Among these is CVE-2024-6827, a potential denial-of-service vulnerability in the Django utility function django.utils.text.wrap(). The Red Hat advisory RHBA-2025:3651 confirms that Quay 3.13.5 includes fixes for these issues. The advisory also references other CVEs addressed in this release. The vulnerabilities are rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The affected versions include Red Hat Quay Enterprise 3 on x86_64 and other architectures as indicated by container image references. The vendor advisory instructs users to update to the fixed version and ensure prior errata are applied.

Successful exploitation of the vulnerabilities in affected Red Hat Quay versions could lead to denial-of-service conditions and other security impacts as indicated by the multiple CVEs addressed. The advisory rates the security impact as important, indicating a significant but not critical risk. There are no known exploits in the wild at this time.

Red Hat has released Quay version 3.13.5 which includes fixes for CVE-2024-6827 and other vulnerabilities. Users should update to this version after applying all previously released errata relevant to their system. The vendor advisory provides updated container images and instructions for applying the update. No additional mitigation steps are indicated beyond applying the official update.