Vulnerabilities in Harbor

6 results

CVE-2026-4404CRITICALUse of hard coded credentials in GoHarbor HarborEPSS 0.5%CVE-2023-20902MEDIUMTiming attack risk in HarborEPSS 0.5%CVE-2024-22261LOWSQL Injection in Harbor scan log APIEPSS 0.4%CVE-2024-22278MEDIUMHarbor fails to validate the user permissions when updating project configurationsEPSS 0.4%CVE-2024-22244MEDIUMHarbor Open Redirect URLEPSS 0.4%CVE-2026-111590—SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal servicesEPSS 0.2%