Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
goharbor records in CISA KEVNo goharbor vulnerabilities are listed in CISA KEV.
Priority MEDIUM 64
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00452 · Published 2026-09-16 · No fix listed CWE-200
Priority LOW 19
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content.
CVSS 3.1MEDIUM 4.1· Network · Low privileges · User interaction · EPSS 0.00368 · Published 2025-07-23 · Fixed in 2.12.4-rc1, 2.13.1-rc1 +1 CWE-79
