Threats tagged 'ghsa-vxqv-j38r-6jmm'

A vulnerability in Red Hat Quay allows unauthenticated remote attackers to send POST requests to the security scanner notification endpoint if the SECURITY_SCANNER_V4_PSK pre-shared key is not set. This can lead to flooding the notification queue and injecting path traversal characters into Clair API URL paths, causing worker resource exhaustion and potential denial of service. The issue mainly affects standalone Quay installations without the pre-shared key configured, as operator-managed deployments generate this key automatically.