Harbor — реестр для хранения Docker образов c открытым исходным кодом.

Authenticated users can exploit an enumeration vulnerability in Harbor

Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

SQL Injection in Cloud Native Computing Foundation Harbor

SQL Injection in Cloud Native Computing Foundation Harbor

Privilege Escalation in Cloud Native Computing Foundation Harbor

Уязвимость функции handle_symtab компонента readelf.c утилиты для модификации и анализа бинарных файлов ELF Elfutils, позволяющая нарушителю вызвать отказ в обслуживании

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path.

Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.

Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.