Harbor vulnerabilities
6 published CVEs name Harbor among the affected products.
- 6Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111590
SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services
Harbor · Harbor
Not scored - CVE-2026-4404
Use of hard coded credentials in GoHarbor Harbor
Harbor · Harbor
Critical9.4 - CVE-2024-22278
Harbor fails to validate the user permissions when updating project configurations
harbor · harbor
Medium6.4 - CVE-2024-22261
SQL Injection in Harbor scan log API
Harbor · Harbor
Low2.7 - CVE-2024-22244
Harbor Open Redirect URL
Harbor · Harbor
Medium4.3 - CVE-2023-20902
Timing attack risk in Harbor
Harbor · Project
Medium5.9