Harbor 5 CVEs across 2 Harbor products. Browse Harbor vulnerabilities, severities, and proof-of-concept exploits.
Harbor products with known CVEs Harbor CVEs — newest first CVE Severity Score Published Summary CVE-2026-4404Critical 9.42026-03-23 Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI. CVE-2024-22278Medium 6.42024-08-02 Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations. CVE-2024-22261Low 2.72024-06-11 SQL-Injection in Harbor allows priviledge users to leak the task IDs CVE-2024-22244Medium 4.32024-06-10 Open Redirect in Harbor <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site. CVE-2023-20902Medium 5.92023-11-09 A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below, Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network acc…