2 matches found
CVE-2026-32589
CVE-2026-32589 concerns Red Hat Quay, where an authenticated user with push access to any repository can interfere with in-progress image uploads of other users due to an insecure direct object reference in the blobupload process. The issue enables reading, modification, or cancellation of anothe...
7.4CVSS5.9AI score0.00243EPSS
SaveExploits0References11Affected Software2
Insecure Default
Overview github.com/goharbor/harbor/src/core/api is a cloud native registry project that stores, signs, and scans content. Affected versions of this package are vulnerable to Insecure Default. Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to...
7.5CVSS6.8AI score0.01711EPSS
SaveExploits0References2
20