Harbor <=1.82.0 - Privilege Escalation

Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...

CLEANSTART-2026-YW71303 Security fixes in harbor 2.13.5-r0

Package harbor version 2.13.5-r0 fixes 7 vulnerabilities: CVE-2025-68121, CVE-2021-3538, CVE-2026-27139, CVE-2025-29923, CVE-2026-27142...

CLEANSTART-2026-RH43355 Security fixes in harbor-fips 2.14.2-r1

Package harbor-fips version 2.14.2-r1 fixes 2 vulnerabilities: CVE-2025-15558, CVE-2026-24051...

CLEANSTART-2026-FY23528 Security fixes in harbor 2.14.2-r2

Package harbor version 2.14.2-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-ZS48821 Security fixes in harbor-registry-fips 2.6.2-r0

Package harbor-registry-fips version 2.6.2-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-JZ64357 Security fixes in harbor-registry-fips 3.1.1-r1

Package harbor-registry-fips version 3.1.1-r1 fixes 1 vulnerabilities: CVE-2026-56852...

CLEANSTART-2026-RR89078 Security fixes in harbor-scanner-trivy 0.35.1-r0

Package harbor-scanner-trivy version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

CLEANSTART-2026-BL40186 Security fixes in harbor 2.13.4-r1

Package harbor version 2.13.4-r1 fixes 3 vulnerabilities: CVE-2025-15558, CVE-2026-27141, ghsa-p436-gjf2-799p...

CLEANSTART-2026-QJ16757 Security fixes in harbor 2.12.4-r1

Package harbor version 2.12.4-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-MA42111 Security fixes in harbor-fips 2.15.0-r1

Package harbor-fips version 2.15.0-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-FT07440 Security fixes in harbor-registry-fips 2.7.1-r0

Package harbor-registry-fips version 2.7.1-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-QI00029 Security fixes in harbor-scanner-trivy-fips 0.35.1-r0

Package harbor-scanner-trivy-fips version 0.35.1-r0 fixes 3 vulnerabilities: CVE-2025-54410, CVE-2025-15558, CVE-2025-29923...

CLEANSTART-2026-BV95521 Security fixes in harbor 2.14.3-r1

Package harbor version 2.14.3-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-QR80565 Security fixes in harbor 2.15.0-r1

Package harbor version 2.15.0-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-IP64122 Security fixes in harbor-fips 2.14.2-r2

Package harbor-fips version 2.14.2-r2 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679, CVE-2026-33186...

CLEANSTART-2026-LM07136 Security fixes in harbor-registry 3.0.0.1-r3

Package harbor-registry version 3.0.0.1-r3 fixes 7 vulnerabilities: CVE-2025-68121, CVE-2021-3538, CVE-2026-27139, CVE-2025-29923, CVE-2026-27142...

CLEANSTART-2026-RM58877 Security fixes in harbor-registry-fips 3.0.0-r1

Package harbor-registry-fips version 3.0.0-r1 fixes 15 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-transfer, kubevela, kubernetes-dashboard, avmfix, redis-operator-fips, crossplane-provider-aws-elastictranscoder-fips, crossplane-provider-aws-opensearch, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-dataexchange, step-ca,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-transfer, kubevela, kubernetes-dashboard, avmfix, redis-operator-fips, crossplane-provider-aws-elastictranscoder-fips, crossplane-provider-aws-opensearch, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-dataexchange, step-ca,...

CLEANSTART-2026-SO51158 Security fixes for CVE-2021-3538, CVE-2025-29923, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-39882 applied in versions: 3.0.0.1-r3, 3.0.0.1-r4, 3.0.0.1-r5, 3.1.1-r0

Multiple security vulnerabilities affect the harbor-registry-fips package. These issues are resolved in later releases. See references for individual vulnerability details...