CVE-2025-30223 vulnerabilities

Vulnerabilities for packages: harbor-fips, harbor...

GHSA-2J42-H78H-Q4FG vulnerabilities

Vulnerabilities for packages: harbor-fips, harbor...

The vulnerability of the Harbor Registry module of the Git-based software platform for collaborative code development on GitLab allows a hacker to execute arbitrary code.

The vulnerability of the Harbor Registry module of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

BIT-GITLAB-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

UBUNTU-CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

Summary of CVE-2024-9773 (GitLab EE) An input validation flaw in the Harbor registry integration affects GitLab Enterprise Edition (EE) versions: 14.9 through 17.8.6, 17.9 through 17.8.3, and 17.10 through 17.10.1. The issue could allow a maintainer to inject malicious code into CLI commands show...

CVE-2024-9773

Removed by vendor...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

GitLab Enterprise Edition（EE） 命令注入漏洞

GitLab Enterprise Edition EE is a content management system from the US-based GitLab, Inc. A command injection vulnerability exists in GitLab Enterprise Edition EE that stems from improper validation of inputs for the Harbor registration integration. The following versions are affected: versions...

CVE-2024-9773: Improper Neutralization of Special Elements used in a Command

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

PT-2025-13172

Name of the Vulnerable Software and Affected Versions GitLab EE versions 14.9 through 17.8.6 GitLab EE versions 17.9 through 17.8.3 GitLab EE versions 17.10 through 17.10.1 Description An issue was discovered in GitLab EE, where an input validation issue in the Harbor registry integration could...

BIT-HARBOR-2024-22244 Harbor Open Redirect URL

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: metrics-server, croc, certificate-transparency-fips, tekton-chains, gomplate, timoni, wait-for-port, docker-compose, sonobuoy, kind, skopeo, prometheus-adapter, gotenberg, crane, aws-load-balancer-controller-fips, cosign, bom, flux-kustomize-controller,...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: gomplate-fips, tekton-chains, argo-workflows-fips, gomplate, traefik, kargo, consul, dagger, harbor-fips, spire-controller-manager-fips, traefik-fips, skopeo, neuvector-fips, pulumi, minio-fips, consul-k8s, grpc-health-probe, sigstore-scaffolding, goreleaser, tempora...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: distribution, step, octo-sts, melange, splunk-otel-collector, podman, kyverno-policy-reporter, opentofu, skopeo, oauth2-proxy, cert-manager-istio-csr, kots, argocd-image-updater, harbor-registry, k3s, sftpgo, spiffe-helper, pulumi, grafana-mimir, gatus, k3d, dgraph,...