Goharbor vulnerabilities
2 vulnerabilities
Known vulnerabilities in Goharbor products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Harbor2 vulnerabilities
PrioritiseCVE-2026-92770goharbor · harborHarbor through 2.15.2 Scanner Credential Disclosure via Query ParameterHarbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts.CVSS7.1HighEPSS0.45%RoutineCVE-2025-32019goharbor · harbor +1 moreHarbor's repository description page allows for XSSHarbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.CVSS4.1MediumEPSS0.37%