630 matches found
Harbor <=1.82.0 - Privilege Escalation
Harbor 1.7.0 through 1.8.2 is susceptible to privilege escalation via core/api/user.go, which allows allows non-admin users to create admin accounts via the POST /api/users API when Harbor is setup with DB as an authentication backend and allows user to do self-registration. id: CVE-2019-16097...
bbrecon
This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: opensearch-datasource, nri-f5, azuredisk-csi, crossplane-provider-aws-opensearchserverless, ceph-csi-operator, langfuse, cloudbeat, crossplane-provider-aws-ssoadmin-fips, crossplane-provider-aws-kinesisanalyticsv2-fips, amazon-ecs-agent-fips, bento-fips, go-sqlcmd,...
GO-2025-3460 vulnerabilities
Vulnerabilities for packages: harbor, zot, kots, harbor-fips...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: harbor, zitadel, tailscale, harbor-fips...
GO-2024-3016 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy-fips, harbor-scanner-trivy, zot...
GO-2024-3331 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2025-3585 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2025-3607 vulnerabilities
Vulnerabilities for packages: harbor, tailscale...
GO-2024-2958 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot...
GO-2024-2737 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, policy-controller, neuvector-scanner, helm-push, buf, wolfictl, melange, syft, docker, k3d, kaniko, dagger, grype, cri-tools, docker-compose...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: flux, flyte, sops, argo-events, py3-cassandra-medusa, grafana-mimir, goreleaser, k8sgpt, sqlpad, wal-g, tekton-chains, pulumi, airflow, buildkitd, restic, falcoctl, guac, opentelemetry-collector-contrib, chezmoi, rekor, cortex, nuclei, thanos, zot, terragrunt,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: flux, trufflehog, aactl, nerdctl, rancher-system-agent, tekton-chains, k3s, witness, vexctl, dagdotdev, k3d, guac, knative-serving, osv-scanner, trivy-operator, teleport, crossplane, harbor-scanner-trivy, dive, zot, traefik, flux-helm-controller, openbao,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: argo-events, pluto, rancher-system-agent, terraform-provider-azapi, k3s, nats-server-config-reloader, conftest, nri-memcached, src, neuvector-sigstore-interface, aws-privateca-issuer, kubernetes-csi-external-health-monitor, chart-testing, ipfs-cluster,...
CVE-2026-66380 Authenticated users may access private OCI referrer metadata
An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions...
CLEANSTART-2026-FY23528 Security fixes in harbor 2.14.2-r2
Package harbor version 2.14.2-r2 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-ZS48821 Security fixes in harbor-registry-fips 2.6.2-r0
Package harbor-registry-fips version 2.6.2-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729...