Login Request a demo
HA
Product
Harbor
by Linuxfoundation · last CVE Mar 23, 2026
24
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 1High 10Medium 13Low 0
Severity
All severities24Critical1High10Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Harbor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-19025
8.8
1%
Mar 20
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform
Affected: 1.7.0 before 1.8.6; 1.9.0 before 1.9.3
CVE-2019-19023
8.8
2%
Mar 20
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform
Affected: 1.7.0 before 1.8.6; 1.9.0 before 1.9.3
CVE-2017-17697
8.6
1%
Dec 15
The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping
Affected: before 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0
CVE-2022-31670
7.7
1%
Nov 14
Harbor fails to validate the user permissions when updating tag retention policies.  By sending a request to update a tag retention policy with an id that belongs to a…
Affected: 1.0.0 before 1.10.13; 2.0.0 before 2.4.3; 2.5.0 before 2.5.2
CVE-2022-31669
7.7
0%
Nov 14
Harbor fails to validate the user permissions when updating tag immutability policies.  By sending a request to update a tag immutability policy with an id that belongs to a…
Affected: 2.0.0 before 2.4.3; 2.5.0 before 2.5.2
CVE-2022-31668
7.7
0%
Nov 14
Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with an id that belongs to a project that the…
Affected: 2.0.0 before 2.4.3; 2.5.0 before 2.5.2
CVE-2022-46463
7.5
6%
Jan 13
An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication
Affected: 1.1.0 through 2.5.3
CVE-2019-16919
7.5
2%
Oct 18
Harbor API has a Broken Access Control vulnerability
Affected: 1.8.0 through 1.8.3; 1.9.0
CVE-2022-31671
7.4
1%
Nov 14
Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs
Affected: 2.0.0 before 2.4.3; 2.5.0 before 2.5.2
CVE-2019-19029
7.2
2%
Mar 20
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform
Affected: 1.7.0 before 1.8.6; 1.9.0 before 1.9.3
Showing 10