CVE-2019-19023

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform...

CVE-2019-19029

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform...

CVE-2025-30223 vulnerabilities

Vulnerabilities for packages: harbor...

GHSA-2J42-H78H-Q4FG vulnerabilities

Vulnerabilities for packages: harbor...

CVE-2025-30223 vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

GHSA-2J42-H78H-Q4FG vulnerabilities

Vulnerabilities for packages: harbor, harbor-fips...

The vulnerability of the Harbor Registry module of the Git-based software platform for collaborative code development on GitLab allows a hacker to execute arbitrary code.

The vulnerability of the Harbor Registry module of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

BIT-GITLAB-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

UBUNTU-CVE-2024-9773

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

Summary of CVE-2024-9773 (GitLab EE) An input validation flaw in the Harbor registry integration affects GitLab Enterprise Edition (EE) versions: 14.9 through 17.8.6, 17.9 through 17.8.3, and 17.10 through 17.10.1. The issue could allow a maintainer to inject malicious code into CLI commands show...

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

CVE-2024-9773

Removed by vendor...

GitLab Enterprise Edition（EE） 命令注入漏洞

GitLab Enterprise Edition EE is a content management system from the US-based GitLab, Inc. A command injection vulnerability exists in GitLab Enterprise Edition EE that stems from improper validation of inputs for the Harbor registration integration. The following versions are affected: versions...

PT-2025-13172 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.9 through 17.8.6 GitLab EE versions 17.9 through 17.8.3 GitLab EE versions 17.10 through 17.10.1 Description: An issue was discovered in GitLab EE, where an input validation issue in the Harbor registry integration could...

BIT-HARBOR-2024-22244 Harbor Open Redirect URL

Open Redirect in Harbor =v2.8.4, =v2.9.2, and =v2.10.0 may redirect a user to a malicious site...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: dive, cortex, crane, cloudflared, smarter-device-manager-fips, smarter-device-manager, tigera-operator, prometheus-redis-exporter-fips, helm-fips, tekton-chains-fips, timoni, atlantis, cert-manager-webhook-pdns-fips, kyverno-policy-reporter-kyverno-plugin, kpt,...