https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 08:25:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02130 bdu:2021-02130 https://cve.radiocsirt.org/vuln/bdu:2021-02130 https://cve.radiocsirt.org/vuln/cnvd-2019-44759 cnvd-2019-44759 https://cve.radiocsirt.org/vuln/cnvd-2019-44759 https://cve.radiocsirt.org/vuln/euvd-2026-58969 EUVD-2026-58969 https://cve.radiocsirt.org/vuln/euvd-2026-58969 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19025 <p>Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.</p> <p>Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19025 https://cve.radiocsirt.org/vuln/ghsa-rffr-c932-cpxv <p><strong>Affected:</strong> Go: github.com/goharbor/harbor</p> <p>Cure53 has discovered that the Harbor web interface does not implement protection mechanisms against Cross-Site Request Forgery (CSRF). By luring an authenticated user onto a prepared third-party website, an attacker can execute any action on the platform in the context of the currently authenticated victim.</p> <p>The vulnerability was immediately fixed by the Harbor team and all supported versions were patched.</p> <p>Successful exploitation of this issue will lead to 3rd parties executing actions on the platform of behalf of authenticated users and administrators.</p> <p>If your product uses the affected releases of Harbor, update to version 1.8.6 and 1.9.3 to patch this issue immediately.</p> <p>https://github.com/goharbor/harbor/releases/tag/v1.8.6 https://github.com/goharbor/harbor/releases/tag/v1.9.3</p> <p><strong>Affected:</strong> Go: github.com/goharbor/harbor</p> <p>Cure53 has discovered that the Harbor web interface does not implement protection mechanisms against Cross-Site Request Forgery (CSRF). By luring an authenticated user onto a prepared third-party website, an attacker can execute any action on the platform in the context of the currently authenticated victim.</p> <p>The vulnerability was immediately fixed by the Harbor team and all supported versions were patched.</p> <p>Successful exploitation of this issue will lead to 3rd parties executing actions on the platform of behalf of authenticated users and administrators.</p> <p>If your product uses the affected releases of Harbor, update to version 1.8.6 and 1.9.3 to patch this issue immediately.</p> <p>https://github.com/goharbor/harbor/releases/tag/v1.8.6 https://github.com/goharbor/harbor/releases/tag/v1.9.3</p> https://cve.radiocsirt.org/vuln/ghsa-rffr-c932-cpxv https://cve.radiocsirt.org/vuln/gsd-2019-19025 gsd-2019-19025 https://cve.radiocsirt.org/vuln/gsd-2019-19025