630 matches found
GHSA-WR3P-R5FJ-WF97 vulnerabilities
Vulnerabilities for packages: harbor-fips, harbor...
GHSA-R6QH-J42J-PW64 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-R6QH-J42J-PW64 vulnerabilities
Vulnerabilities for packages: harbor-fips, harbor...
CVE-2024-40465 vulnerabilities
Vulnerabilities for packages: harbor-fips, harbor...
CVE-2024-40464 vulnerabilities
Vulnerabilities for packages: harbor...
CVE-2024-40464 vulnerabilities
Vulnerabilities for packages: harbor-fips, harbor...
CVE-2024-40465 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-HW28-333W-QXP3 Harbor fails to validate the user permissions when updating project configurations
Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...
Harbor fails to validate the user permissions when updating project configurations
Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...
GHSA-V23V-6JW2-98FQ vulnerabilities
Vulnerabilities for packages: neuvector-scanner, commercial-chainloop-backend, k8sgpt, dagdotdev, tkn, gh, slsa-verifier, helm-push, grafana-alloy, zarf, kubeflow-katib, cert-manager-cmctl, vault, wolfictl, kots, k9s, tekton-chains, zot, k3s, helm-fips, traefik-fips, melange, helm-operator-fips,...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, zot, harbor-scanner-trivy...
GO-2024-2916 SQL Injection in Harbor scan log API in github.com/goharbor/harbor
SQL Injection in Harbor scan log API in github.com/goharbor/harbor...
GO-2024-2915 Open Redirect URL in Harbor in github.com/goharbor/harbor
Open Redirect URL in Harbor in github.com/goharbor/harbor...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: py3-azure-identity, step, falcoctl, hugo, flyte, flux-kustomize-controller, py3-cassandra-medusa, rook, ksops, rclone, sops, trivy, step-ca, thanos, nuclei, up, zarf, sqlpad, hugo-extended, spire-server, chezmoi, flux-image-reflector-controller, guac,...
CVE-2024-22261
SQL-Injection in Harbor allows priviledge users to leak the task IDs...
