Approved changes feed: RSS · Atom
cpe:2.3:a:harbor:harbor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Harbor (1b2c4c01-4bad-5dcc-a5a2-158ed0c0f956) |
|---|---|
| Product | Harbor (acbea685-fa46-5ad3-87aa-32f4fb649000) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/goharbor/harbor |
purl2cpe | 2026-06-01 10:17:57.293415 |
pkg:golang/github.com/goharbor/harbor |
purl2cpe | 2026-06-01 10:17:57.293417 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4404 |
vulnerable | 2026-06-08 08:05:13.326697 |
Use of hard coded credentials in GoHarbor Harbor
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
Published: 2026-03-23T14:47:13.396Z
Updated: 2026-03-24T15:25:10.390Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22278 |
vulnerable | 2026-06-08 06:29:34.409233 |
Harbor fails to validate the user permissions when updating project configurations
MEDIUM (6.4)
Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.
Published: 2024-08-02T00:59:55.313Z
Updated: 2024-08-14T21:35:37.751Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22261 |
vulnerable | 2026-06-08 06:29:34.316326 |
SQL Injection in Harbor scan log API
LOW (2.7)
SQL-Injection in Harbor allows priviledge users to leak the task IDs
Published: 2024-06-10T23:25:32.158Z
Updated: 2024-08-01T22:43:34.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22244 |
vulnerable | 2026-06-08 06:29:34.206403 |
Harbor Open Redirect URL
MEDIUM (4.3)
Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site.
Published: 2024-06-10T23:02:59.347Z
Updated: 2024-08-01T22:43:33.635Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.