Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: harness Clear all filters
TI-2026-62496 CVE-2026-92750 · GHSA-38q4-gjc8-cq8c

Harness through 3.3.0 Missing Access Control via infraproviders endpoint

Priority LOW 31

Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00276 Published 2026-09-16 No fix listed CWE-862
TI-2025-35974 CVE-2025-58158 · GHSA-w469-hj2f-jpr5

Harness Affected by Arbitrary File Write in Gitness LFS server

Priority MEDIUM 41

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00503 Published 2025-08-29 Fixed in 3.3.0, 1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13 CWE-22