GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, crossplane-provider-aws-keyspaces-fips, k8sgateway-fips, cloud-provider-azure-fips, temporal-server, kubevela, deck-fips, juicefs, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-chime-fip...

CLEANSTART-2026-SO51158 Security fixes for CVE-2021-3538, CVE-2025-29923, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-39882 applied in versions: 3.0.0.1-r3, 3.0.0.1-r4, 3.0.0.1-r5, 3.1.1-r0

Multiple security vulnerabilities affect the harbor-registry-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LZ81863 Security fixes for CVE-2025-29923, CVE-2026-34040, CVE-2026-39822, CVE-2026-49834, CVE-2026-49835, CVE-2026-50151 applied in versions: 0.36.0-r0, 0.36.0-r1

Multiple security vulnerabilities affect the harbor-trivy-adapter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: etcd, etcd-fips, gatekeeper, gitsign, grafana-fips, telegraf, vault-fips, containerd, knative-kafka-broker-fips, upwind-agent, flux, argo-cd, loki, commercial-expanso-edge, omnictl-multiarch, guac, external-secrets-operator-fips, grafana, kubernetes, argo-events,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, grafana-fips, minio-fips, containerd, chisel, trivy-fips, argocd-image-updater-fips, tekton-pipelines-fips, loki, rancher-agent, external-secrets-operator-fips, traefik-fips, tekton-pipelines, calico-fips, fscrypt, omnictl-multiarch-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, longhorn-manager-fips, gatekeeper, splunk-otel-collector-fips, gh, grafana-fips, prometheus-podman-exporter, minio-fips, pulumi, act, pulumi-kubernetes-operator, juicefs, containerd, docker-cli-buildx, teleport-operator-fips, packer-fips, chisel,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: helmfile, crossplane-provider-azure-storagesync, frankenphp-8.2, gatekeeper, splunk-otel-collector-fips, buildah, gh, grafana-fips, minio-fips, prometheus-podman-exporter, act, pulumi, juicefs, pulumi-kubernetes-operator, sops-fips, containerd, docker-cli-buildx,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, grafana-fips, minio-fips, containerd, chisel, trivy-fips, argocd-image-updater-fips, tekton-pipelines-fips, loki, rancher-agent, external-secrets-operator-fips, traefik-fips, tekton-pipelines, calico-fips, fscrypt, omnictl-multiarch-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: helmfile, crossplane-provider-azure-storagesync, frankenphp-8.2, gatekeeper, splunk-otel-collector-fips, buildah, gh, grafana-fips, minio-fips, prometheus-podman-exporter, act, pulumi, juicefs, pulumi-kubernetes-operator, sops-fips, containerd, docker-cli-buildx,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, buildah, grafana-fips, containerd, docker-cli-buildx, teleport-operator-fips, tekton-pipelines-fips, loki, rancher-agent, external-secrets-operator-fips, traefik-fips, tekton-pipelines, calico-fips, fscrypt, omnictl-multiarch-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, buildah, grafana-fips, prometheus-podman-exporter, pulumi, pulumi-kubernetes-operator, act, juicefs, containerd, docker-cli-buildx, teleport-operator-fips, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: frankenphp-8.2, gatekeeper, buildah, grafana-fips, containerd, docker-cli-buildx, teleport-operator-fips, packer-fips, tekton-pipelines-fips, loki, rancher-agent, external-secrets-operator-fips, traefik-fips, tekton-pipelines, calico-fips, fscrypt,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: frp, cert-manager-csi-driver, trufflehog, gitea, flux-source-controller, nuclei, spqr, terraform, gitlab-runner, cert-manager, opentofu, kyverno-notation-aws, sftpgo-plugin-auth, k6, external-secrets-operator, bento, xeol, rancher-agent, rancher-webhook, teleport, de...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: frp, cert-manager-csi-driver, trufflehog, gitea, flux-source-controller, nuclei, spqr, terraform, gitlab-runner, cert-manager, opentofu, kyverno-notation-aws, sftpgo-plugin-auth, k6, external-secrets-operator, bento, xeol, rancher-agent, rancher-webhook, teleport, de...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: grafana-fips, minio-fips, juicefs, xeol, packer-fips, elastic-agent, spqr, sftpgo-plugin-auth, syncthing-fips, rancher-webhook-fips, rancher-agent, external-secrets-operator-fips, gitlab-runner-fips, cert-manager-fips, xeol-fips, beats, kyverno-fips,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: grafana-fips, minio-fips, juicefs, xeol, packer-fips, elastic-agent, spqr, sftpgo-plugin-auth, syncthing-fips, rancher-webhook-fips, rancher-agent, external-secrets-operator-fips, gitlab-runner-fips, cert-manager-fips, xeol-fips, beats, kyverno-fips,...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

GO-2026-4876 Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor

Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor...

PT-2026-29931

Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor...

CLEANSTART-2026-FB05615 Security fixes for CVE-2025-15558, CVE-2025-53547, CVE-2025-55198, CVE-2025-55199, CVE-2026-27141, ghsa-557j-xg8c-q2mm, ghsa-9h84-qmv7-982p, ghsa-f6x5-jh6r-wrfv, ghsa-f9f8-9pmf-xv68, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p applied in versions: 2.13.4-r0, 2.13.4-r1, 2.13.4-r2

Multiple security vulnerabilities affect the harbor package. These issues are resolved in later releases. See references for individual vulnerability details...