v3.12.20

📅 Jul 22, 2026📦 quay-ioView on GitHub →

🐛 2 fixes🔧 2 symbols

Summary

This release includes dependency updates and security fixes, addressing a CVE in form-data handling and preventing SSRF vulnerabilities in proxy configurations.

🐛 Bug Fixes

Fixes CVE-2026-12143 in form-data handling.
Prevents Server-Side Request Forgery (SSRF) in proxy cache upstream registry configuration.

Affected Symbols

golang.org/x/net sanitize-html