Linuxfoundation Harbor vulnerabilities

• harbor Use of hard coded credentials in GoHarbor Harbor CVE-2026-4404 Fix available 9.4 CriticalMarch 23, 2026
• harbor User permission validation failure and disclosure of P2P preheat execution logs CVE-2022-31668 Fix available 7.4 HighNovember 14, 2024
• harbor Harbor fails to validate the user permissions when updating project configurations CVE-2024-22278 Fix available 6.4 MediumJuly 31, 2024
• harbor SQL Injection in Harbor scan log API CVE-2024-22261 Fix available 2.7 LowJune 2, 2024
• harbor Harbor Open Redirect URL CVE-2024-22244 Fix available 4.3 MediumJune 2, 2024
• linuxfoundation harbor, harbor project +1 more Timing attack risk in Harbor CVE-2023-20902 Fix available 5.9 MediumOctober 10, 2023
• linuxfoundation harbor An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private... CVE-2022-46463 Public exploitFix availableDisputed 7.5 HighJanuary 12, 2023
• harbor Harbor fails to validate the user permissions when updating a robot account CVE-2022-31667 Fix available 6.4 MediumSeptember 16, 2022
• harbor Harbor fails to validate the user permissions when updating tag immutability policies CVE-2022-31669 Fix available 6.4 MediumSeptember 16, 2022
• harbor Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies CVE-2022-31666 Fix available 7.7 HighSeptember 16, 2022
• harbor Harbor fails to validate the user permissions when updating tag retention policies CVE-2022-31670 Fix available 7.7 HighSeptember 16, 2022
• harbor Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs CVE-2022-31671 Fix available 7.4 HighSeptember 9, 2022
• linuxfoundation harbor Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) CVE-2019-19030 Public exploitFix available 5.3 MediumFebruary 11, 2022
• linuxfoundation harbor "catalog's registry v2 api exposed on unauthenticated path in Harbor" CVE-2020-29662 Fix available 5.3 MediumFebruary 2, 2021
• linuxfoundation harbor Authenticated users can exploit an enumeration vulnerability in Harbor CVE-2020-13794 Fix available 4.3 MediumSeptember 29, 2020
• linuxfoundation harbor Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) CVE-2020-13788 Fix available 4.3 MediumJuly 15, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more Privilege Escalation in Cloud Native Computing Foundation Harbor CVE-2019-19023 Fix available 8.8 HighMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19029 Fix available 7.2 HighMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more SQL Injection in Cloud Native Computing Foundation Harbor CVE-2019-19026 Fix available 4.9 MediumMarch 20, 2020
• linuxfoundation harbor, pivotal vmware harbor registry +1 more Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor CVE-2019-19025 Fix available 8.8 HighMarch 20, 2020
• harbor A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and i… CVE-2019-3990 4.3 MediumDecember 3, 2019
• linuxfoundation harbor, vmware cloud foundation, harbor container registry +2 more Harbor API has a Broken Access Control vulnerability. The vulnerability allows project... CVE-2019-16919 7.5 HighOctober 18, 2019
• linuxfoundation harbor Missing Authorization in Harbor CVE-2019-16097 Public exploitFix available EPSS 22.4% 6.5 MediumSeptember 8, 2019
• linuxfoundation harbor The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint... CVE-2017-17697 8.6 HighDecember 15, 2017