Skip to content
Harbor vulnerabilities
Newest
-
harbor
SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services
CVE-2026-111590
No score
-
goharbor harbor
Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
CVE-2026-92770
7.1 High
-
harbor
Use of hard coded credentials in GoHarbor Harbor
CVE-2026-4404
Fix available
9.4 Critical
-
goharbor harbor
Harbor's repository description page allows for XSS
CVE-2025-32019
Fix available
4.1 Medium
-
harbor
User permission validation failure and disclosure of P2P preheat execution logs
CVE-2022-31668
Fix available
7.4 High
-
harbor
Harbor fails to validate the user permissions when updating project configurations
CVE-2024-22278
Fix available
6.4 Medium
-
harbor
SQL Injection in Harbor scan log API
CVE-2024-22261
Fix available
2.7 Low
-
harbor
Harbor Open Redirect URL
CVE-2024-22244
Fix available
4.3 Medium
-
linuxfoundation harbor, harbor project +1 more
Timing attack risk in Harbor
CVE-2023-20902
Fix available
5.9 Medium
-
harbor
Harbor fails to validate the user permissions when updating a robot account
CVE-2022-31667
Fix available
6.4 Medium
-
harbor
Harbor fails to validate the user permissions when updating tag immutability policies
CVE-2022-31669
Fix available
6.4 Medium
-
harbor
Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies
CVE-2022-31666
Fix available
7.7 High
-
harbor
Harbor fails to validate the user permissions when updating tag retention policies
CVE-2022-31670
Fix available
7.7 High
-
harbor
Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs
CVE-2022-31671
Fix available
7.4 High
-
harbor
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and i…
CVE-2019-3990
4.3 Medium