Malicious code in harbor-bonfire-qwl670-project (npm)

The package harbor-bonfire-qwl670-project was found to contain malicious code...

Malicious code in orangutan-harbor-nbd505-project (npm)

The package orangutan-harbor-nbd505-project was found to contain malicious code...

MAL-2025-16534 Malicious code in caravan-harbor-jcj085-project (npm)

The package caravan-harbor-jcj085-project was found to contain malicious code...

MAL-2025-22197 Malicious code in harbor-eggplant-gwqy (npm)

The package harbor-eggplant-gwqy was found to contain malicious code...

MAL-2025-22208 Malicious code in harbor-river-xur763-project (npm)

The package harbor-river-xur763-project was found to contain malicious code...

MAL-2025-22207 Malicious code in harbor-reef-inz755-project (npm)

The package harbor-reef-inz755-project was found to contain malicious code...

MAL-2025-22202 Malicious code in harbor-lettuce-yl8i (npm)

The package harbor-lettuce-yl8i was found to contain malicious code...

MAL-2025-38814 Malicious code in waterfall-harbor-xkl008-project (npm)

The package waterfall-harbor-xkl008-project was found to contain malicious code...

MAL-2025-22206 Malicious code in harbor-rainbow-s7vp (npm)

The package harbor-rainbow-s7vp was found to contain malicious code...

MAL-2025-22203 Malicious code in harbor-maple-jwaq (npm)

The package harbor-maple-jwaq was found to contain malicious code...

MAL-2025-22200 Malicious code in harbor-india-eqi7 (npm)

The package harbor-india-eqi7 was found to contain malicious code...

MAL-2025-22201 Malicious code in harbor-jewel-rxy620-project (npm)

The package harbor-jewel-rxy620-project was found to contain malicious code...

MAL-2025-22210 Malicious code in harbor-uplift-vkr207-project (npm)

The package harbor-uplift-vkr207-project was found to contain malicious code...

MAL-2025-22191 Malicious code in harbor-apple-6ip0 (npm)

The package harbor-apple-6ip0 was found to contain malicious code...

MAL-2025-39112 Malicious code in whale-harbor-iwx983-project (npm)

The package whale-harbor-iwx983-project was found to contain malicious code...

MAL-2025-22192 Malicious code in harbor-aspen-dmp363-project (npm)

The package harbor-aspen-dmp363-project was found to contain malicious code...

MAL-2025-38058 Malicious code in valley-harbor-xfp990-project (npm)

The package valley-harbor-xfp990-project was found to contain malicious code...

SUSE CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

SUSE CVE-2025-32019

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...

GO-2025-3826 Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...