Linuxfoundation Harbor vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Linuxfoundation Harbor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2019-19026github.com/goharborharbor+2
EPSS score
1.42%
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.4.3CVE-2019-3990linuxfoundationharbor
EPSS score
1.04%
A User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and information can be obtained about registered users can be obtained via the "search" functionality.9.4CVE-2026-4404github.com/goharborharbor+2
EPSS score
0.60%
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.6.5CVE-2023-20902github.com/goharborharbor+2
EPSS score
0.45%
A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information.