Skip to content
HHarbor
Products
| Product | CVEs | Exploited | Latest |
|---|
| Harbor | 5 | – | Oct 26, 2026 |
| Project | 1 | – | Nov 9, 2023 |
Exploited and recent CVEs
-
CVE-2026-111590
Unrated
SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal services
0.2%
-
CVE-2026-4404
Critical 9.4
Use of hard coded credentials in GoHarbor Harbor
0.5%
-
CVE-2024-22278
Medium 6.4
Harbor fails to validate the user permissions when updating project configurations
0.4%
-
CVE-2024-22261
Low 2.7
SQL Injection in Harbor scan log API
0.4%
-
CVE-2024-22244
Medium 4.3
Harbor Open Redirect URL
0.4%
-
CVE-2023-20902
Medium 5.9
Timing attack risk in Harbor
0.5%