630 matches found
GHSA-WR3P-R5FJ-WF97 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GHSA-R6QH-J42J-PW64 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-R6QH-J42J-PW64 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
CVE-2024-40465 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
CVE-2024-40465 vulnerabilities
Vulnerabilities for packages: harbor...
CVE-2024-40464 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
CVE-2024-40464 vulnerabilities
Vulnerabilities for packages: harbor...
GHSA-HW28-333W-QXP3 Harbor fails to validate the user permissions when updating project configurations
Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...
Harbor fails to validate the user permissions when updating project configurations
Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...
GHSA-V23V-6JW2-98FQ vulnerabilities
Vulnerabilities for packages: buildah, neuvector-scanner-fips, buf, trivy-fips, kaniko, chartmuseum-fips, ctop, grafana-alloy-fips, opentelemetry-collector, harbor-scanner-trivy, zarf, skaffold, grafana-alloy, flux-source-controller, nerdctl, docker, cert-manager-cmctl, cosign, argo-workflows-fip...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: zot, harbor-scanner-trivy...
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, harbor-scanner-trivy-fips, zot...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: zot, harbor-scanner-trivy...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, harbor-scanner-trivy-fips, zot...
GO-2024-2916 SQL Injection in Harbor scan log API in github.com/goharbor/harbor
SQL Injection in Harbor scan log API in github.com/goharbor/harbor...
GO-2024-2915 Open Redirect URL in Harbor in github.com/goharbor/harbor
Open Redirect URL in Harbor in github.com/goharbor/harbor...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: cosign, nuclei, cortex, boring-registry, flux-image-reflector-controller, falcoctl, fulcio, rekor, zot, grafana-mimir, flux-source-controller, argo-events, airflow, terragrunt, fluent-bit-plugin-loki, tekton-chains, argo-workflows, hugo-extended, py3-azure-identity,...
CVE-2024-22261
SQL-Injection in Harbor allows priviledge users to leak the task IDs...
