Most recent entries from all

BIT-harbor-2025-32019 — Harbor's repository description page allows for XSS

2026-10-02T18:43:33.351052+00:00

Affected: Bitnami: harbor

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0 and 2.13.0, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.

EUVD-2026-248366

2026-10-02T18:43:33.351108+00:00

EUVD-2026-248366

fkie_cve-2025-32019

2026-10-02T18:43:33.351125+00:00

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.

GHSA-f9vc-vf3r-pqqq — Harbor repository description page has Cross-site Scripting vulnerability

2026-10-02T18:43:33.351149+00:00

Affected: Go: github.com/goharbor/harbor

### Impact

In the Harbor repository information, it is possible to inject code resulting in a stored XSS issue.

### Patches Harbor v2.12.3 Harbor 2.11.3

### Workarounds No

### References

### Credit gleb.razvitie@gmail.com

openSUSE-SU-2025:15405-1 — govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media

2026-10-02T18:43:33.351177+00:00

govulncheck-vulndb-0.0.20250730T213748-1.1 on GA media

WID-SEC-W-2025-1634 — Harbor: Schwachstelle ermöglicht Cross-Site Scripting

2026-10-02T18:43:33.351226+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Harbor ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.