Harbor vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20262

Newest CVEs

• CVE-2026-111590

  SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services

  Harbor · Harbor

  Not scored
• CVE-2026-4404

  Use of hard coded credentials in GoHarbor Harbor

  Harbor · Harbor

  Critical9.4
• CVE-2024-22278

  Harbor fails to validate the user permissions when updating project configurations

  harbor · harbor

  Medium6.4
• CVE-2024-22261

  SQL Injection in Harbor scan log API

  Harbor · Harbor

  Low2.7
• CVE-2024-22244

  Harbor Open Redirect URL

  Harbor · Harbor

  Medium4.3
• CVE-2023-20902

  Timing attack risk in Harbor

  Harbor · Project

  Medium5.9