630 matches found
Harbor <=1.82.0 - Privilege Escalation
Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: frankenphp-8.4, crossplane-provider-aws-autoscalingplans-fips, emqx-exporter, harbor, task, crossplane-provider-aws-appautoscaling-fips, crossplane-provider-aws-s3control-fips, cloudnative-pg, kong-ingress-controller-fips, prometheus-process-exporter-fips,...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: harbor, tailscale, zitadel, harbor-fips...
GO-2025-3460 vulnerabilities
Vulnerabilities for packages: harbor, kots, zot, harbor-fips...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, harbor-scanner-trivy-fips, zot...
GO-2024-3016 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2024-3331 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2025-3585 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: tailscale, harbor...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: k3d, wolfictl, helm-push, docker, melange, buf, syft, grype, policy-controller, harbor-scanner-trivy, docker-compose, dagger, kaniko, cri-tools, neuvector-scanner...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: trino, cortex, step, zarf, restic, tkn, rclone, rekor, flyte, flux, terragrunt, thanos, guac, pulumi, goreleaser, chezmoi, flux-source-controller, spire-server, buildkitd, sigstore-scaffolding, fluent-bit-plugin-loki, grafana-mimir, falcoctl,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: k3d, aactl, istio, kubeflow-katib, kwok, rke2-cloud-provider, harbor, rancher-system-agent, knative-serving, crossplane, bento, flux, guac, vexctl, teleport, paranoia, spire-server, xeol, dive, kargo, cosign, flux-image-reflector-controller, k3s, kyverno-notation-aws...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: prometheus, nova, docker-cli-buildx, kubeflow-katib, chart-testing, mongo-tools, k8sgateway, kube-bench, bom, thanos-operator, polaris, kubernetes-dashboard-web, dive, ini-file, yunikorn-k8shim, rabbitmq-default-user-credential-updater, kube-logging-operator,...
CVE-2026-66380 Authenticated users may access private OCI referrer metadata
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CLEANSTART-2026-KX00546 Security fixes in harbor-registry-fips 2.8.3-r0
Package harbor-registry-fips version 2.8.3-r0 fixes 1 vulnerabilities: CVE-2025-29923...
CLEANSTART-2026-RH43355 Security fixes in harbor-fips 2.14.2-r1
Package harbor-fips version 2.14.2-r1 fixes 2 vulnerabilities: CVE-2025-15558, CVE-2026-24051...
CLEANSTART-2026-ZS48821 Security fixes in harbor-registry-fips 2.6.2-r0
Package harbor-registry-fips version 2.6.2-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729...