github.com/goharbor/harbor vulnerabilities (Go)

23 vulnerabilities.

• github.com/goharbor/harbor Go Harbor: LDAP password and OIDC secret are not redacted in the audit log GHSA-prh4-vhfh-24mj Fix available 6.9 MediumMarch 26, 2026
• github.com/goharbor/harbor Go Use of hard coded credentials in GoHarbor Harbor CVE-2026-4404 Fix available 9.4 CriticalMarch 23, 2026
• github.com/goharbor/harbor Go Possible ORM Leak Vulnerability in the Harbor CVE-2025-30086 Fix available 4.9 MediumJuly 23, 2025
• github.com/goharbor/harbor Go Harbor's repository description page allows for XSS CVE-2025-32019 Fix available 4.1 MediumJuly 23, 2025
• github.com/goharbor/harbor Go User permission validation failure and disclosure of P2P preheat execution logs CVE-2022-31668 Fix available 7.4 HighNovember 14, 2024
• github.com/goharbor/harbor Go Harbor fails to validate the user permissions when updating project configurations CVE-2024-22278 Fix available 6.4 MediumJuly 31, 2024
• github.com/goharbor/harbor Go SQL Injection in Harbor scan log API CVE-2024-22261 Fix available 2.7 LowJune 2, 2024
• github.com/goharbor/harbor Go Harbor Open Redirect URL CVE-2024-22244 Fix available 4.3 MediumJune 2, 2024
• github.com/goharbor/harbor Go Timing attack risk in Harbor CVE-2023-20902 Fix available 5.9 MediumOctober 10, 2023
• github.com/goharbor/harbor Go Harbor fails to validate the user permissions when updating a robot account CVE-2022-31667 Fix available 6.4 MediumSeptember 16, 2022
• github.com/goharbor/harbor Go Harbor fails to validate the user permissions when updating tag immutability policies CVE-2022-31669 Fix available 6.4 MediumSeptember 16, 2022
• github.com/goharbor/harbor Go Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies CVE-2022-31666 Fix available 7.7 HighSeptember 16, 2022
• github.com/goharbor/harbor Go Harbor fails to validate the user permissions when updating tag retention policies CVE-2022-31670 Fix available 7.7 HighSeptember 16, 2022
• github.com/goharbor/harbor Go Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs CVE-2022-31671 Fix available 7.4 HighSeptember 9, 2022
• github.com/goharbor/harbor Go Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) CVE-2019-19030 Public exploitFix available 5.3 MediumFebruary 11, 2022
• github.com/goharbor/harbor Go "catalog's registry v2 api exposed on unauthenticated path in Harbor" CVE-2020-29662 Fix available 5.3 MediumFebruary 2, 2021
• github.com/goharbor/harbor Go Authenticated users can exploit an enumeration vulnerability in Harbor CVE-2020-13794 Fix available 4.3 MediumSeptember 29, 2020
• github.com/goharbor/harbor Go Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) CVE-2020-13788 Fix available 4.3 MediumJuly 15, 2020
• github.com/goharbor/harbor Go Privilege Escalation in Cloud Native Computing Foundation Harbor CVE-2019-19023 Fix available 8.8 HighMarch 20, 2020
• github.com/goharbor/harbor Go SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19029 Fix available 7.2 HighMarch 20, 2020
• github.com/goharbor/harbor Go SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19026 Fix available 4.9 MediumMarch 20, 2020
• github.com/goharbor/harbor Go Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor CVE-2019-19025 Fix available 8.8 HighMarch 20, 2020
• github.com/goharbor/harbor Go Missing Authorization in Harbor CVE-2019-16097 Public exploitFix available EPSS 22.4% 6.5 MediumSeptember 8, 2019