v3.12.21
📦 quay-ioView on GitHub →
🐛 5 fixes🔧 5 symbols
Summary
This release addresses several CVEs by upgrading dependencies like pyasn1 and pillow, and overriding others like brace-expansion and js-yaml. It also includes a fix to prevent SSRF in repository sources.
🐛 Bug Fixes
- CVE-2026-45822 - decode-uri-component vulnerability fixed.
- CVE-2026-59885 addressed by upgrading pyasn1 from 0.6.3 to 0.6.4.
- CVE-2026-13149 addressed by overriding brace-expansion.
- CVE-2026-59869 addressed by overriding js-yaml.
- Prevented SSRF in repository sources.