{"id":"INC-redhat-m4bddccdx0b2","kind":"incident","aliases":[],"related":[],"title":"Red Hat: Quay.io Intermittent HTTP 502 on Pull/Push","description":"On May 9, a surge of concurrent automated image pushes caused database lock contention that degraded Quay.io for approximately 18 minutes. Both image pushes and pulls returned errors during this window. The team identified and disabled an internal feature that amplified the contention, restoring service. We are redesigning this feature to operate asynchronously and improving our database locking mechanisms to better handle high-concurrency traffic.","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Red Hat","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","ops","redhat","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-05-09T19:30:00+00:00","first_seen_at":"2026-11-14T01:28:05+00:00","triaged_at":"2026-11-14T01:29:33+00:00","updated_at":"2026-11-14T01:29:33+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'18':38C '502':6A '9':21C 'amplifi':59C 'approxim':37C 'asynchron':71C 'autom':26C 'better':79C 'caus':29C 'concurr':25C,83C 'content':32C,61C 'databas':30C,75C 'degrad':34C 'disabl':54C 'error':46C 'featur':57C,68C 'handl':80C 'hat':2A,14A 'high':82C 'high-concurr':81C 'http':5A 'identifi':52C 'imag':27C,41C 'improv':73C 'inc':10A 'inc-redhat-m4bddccdx0b2':9A 'incid':15B 'intermitt':4A 'intern':56C 'lock':31C,76C 'm4bddccdx0b2':12A 'may':20C 'mechan':77C 'minut':39C 'op':16B 'oper':70C 'pull':44C 'pull/push':8A 'push':28C,42C 'quay.io':3A,35C 'red':1A,13A 'redesign':66C 'redhat':11A,17B 'restor':62C 'return':45C 'servic':63C 'surg':23C 'team':51C 'traffic':84C 'vendor':18B 'window':49C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["hat","redhat"],"ptokens":["hat","red"],"labels":["high","incident","ops","redhat","vendor"],"campaign_type":null,"search_a":"'502':6A 'hat':2A,14A 'http':5A 'inc':10A 'inc-redhat-m4bddccdx0b2':9A 'intermitt':4A 'm4bddccdx0b2':12A 'pull/push':8A 'quay.io':3A 'red':1A,13A 'redhat':11A","search_b":"'incid':15B 'op':16B 'redhat':17B 'vendor':18B","search_c":"'18':38C '9':21C 'amplifi':59C 'approxim':37C 'asynchron':71C 'autom':26C 'better':79C 'caus':29C 'concurr':25C,83C 'content':32C,61C 'databas':30C,75C 'degrad':34C 'disabl':54C 'error':46C 'featur':57C,68C 'handl':80C 'high':82C 'high-concurr':81C 'identifi':52C 'imag':27C,41C 'improv':73C 'intern':56C 'lock':31C,76C 'may':20C 'mechan':77C 'minut':39C 'oper':70C 'pull':44C 'push':28C,42C 'quay.io':35C 'redesign':66C 'restor':62C 'return':45C 'servic':63C 'surg':23C 'team':51C 'traffic':84C 'window':49C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-05-09T19:30:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"redhat:m4bddccdx0b2","url":"https://stspg.io/rpk5vr4kd3j0","severity":"high","published_at":"2026-05-09T19:30:00+00:00","modified_at":"2026-05-15T17:11:43+00:00","first_seen_at":"2026-11-14T01:28:05+00:00","fetched_at":"2026-11-14T01:57:46+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}