Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

models

package

Go to main page

Versions in this module

v1

v1.8.6

Nov 15, 2019 GO-2022-0704 +14 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.6-rc1

Nov 15, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.5

Nov 1, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.5-rc1

Nov 1, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.4

Sep 27, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.4-rc1

Sep 27, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.3

Sep 17, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

type RobotRep

+ ID int64

v1.8.3-rc1

Sep 16, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.2

Aug 5, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

type HTTPAuthProxy

+ SkipSearch bool

type MemberQuery

+ GroupIDs []int

type User

+ GroupIDs []int

v1.8.2-rc2

Aug 5, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.2-rc1

Jul 19, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.1

Jun 17, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.0

May 17, 2019 GO-2022-0704 +18 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

+ const RobotTable

+ func ParseScheduleParamToCron(param *ScheduleParam) string

+ type HTTPAuthProxy struct

+ AlwaysOnBoard bool

+ Endpoint string

+ TokenReviewEndpoint string

+ VerifyCert bool

type LdapGroupConf

+ LdapGroupMembershipAttribute string

+ type OIDCSetting struct

+ ClientID string

+ ClientSecret string

+ Endpoint string

+ Name string

+ RedirectURL string

+ Scope []string

+ VerifyCert bool

+ type OIDCUser struct

+ CreationTime time.Time

+ ID int64

+ PlainSecret string

+ Secret string

+ SubIss string

+ Token string

+ UpdateTime time.Time

+ UserID int

+ func (o *OIDCUser) TableName() string

+ type ResourceActions struct

+ Actions []string

+ Name string

+ type Robot struct

+ CreationTime time.Time

+ Description string

+ Disabled bool

+ ExpiresAt int64

+ ID int64

+ Name string

+ ProjectID int64

+ UpdateTime time.Time

+ func (r *Robot) TableName() string

+ type RobotQuery struct

+ Disabled bool

+ FuzzyMatchName bool

+ Name string

+ ProjectID int64

+ type RobotRep struct

+ Name string

+ Token string

+ type RobotReq struct

+ Access []*rbac.Policy

+ Description string

+ Disabled bool

+ Name string

+ func (rq *RobotReq) Valid(v *validation.Validation)

+ type ScheduleParam struct

+ Offtime int64

+ Type string

+ Weekday int8

type User

+ OIDCUserMeta *OIDCUser

v1.8.0-rc2

May 16, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.8.0-rc1

May 10, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.8

Dec 4, 2020 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.8-rc2

Dec 4, 2020 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.8-rc1

Dec 4, 2020 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.7

Aug 7, 2020 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.7-rc1

Aug 7, 2020 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.6

Sep 12, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.6-rc1

Sep 12, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.5

Apr 1, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.4

Mar 1, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.3

Feb 13, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.2

Jan 25, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.1

Jan 4, 2019 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.0

Dec 19, 2018 GO-2022-0704 +17 more

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

+ const JobLogTable

+ type Image struct

+ Project string

+ Repo string

+ Tag string

+ func ParseImage(image string) (*Image, error)

+ type JobLog struct

+ Content string

+ CreationTime time.Time

+ LogID int

+ UUID string

+ func (a *JobLog) TableName() string

type PostGreSQL

+ SSLMode string

type Project

+ ChartCount uint64

type RepJob

+ OpUUID string

type RepJobQuery

+ OpUUID string

+ type RetagRequest struct

+ Override bool

+ SrcImage string

+ Tag string

+ type Sorting struct

+ Sort string

v1.7.0-rc2

Dec 12, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.7.0-rc1

Dec 6, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.3

Dec 11, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.2

Nov 19, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.1

Oct 16, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.0

Sep 7, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

+ const AdminJobTable

+ type AdminJob struct

+ CreationTime time.Time

+ Cron string

+ Deleted bool

+ ID int64

+ Kind string

+ Name string

+ Status string

+ UUID string

+ UpdateTime time.Time

+ func (a *AdminJob) TableName() string

+ type AdminJobQuery struct

+ Deleted bool

+ ID int64

+ Kind string

+ Name string

+ Status string

+ UUID string

type Database

+ PostGreSQL *PostGreSQL

type Label

+ Deleted bool

type LabelQuery

+ FuzzyMatchName bool

type LdapGroupConf

+ LdapGroupAdminDN string

type MemberQuery

+ GroupList []*UserGroup

type User

+ GroupList []*UserGroup

v1.6.0-rc3

Sep 4, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.0-rc2

Aug 23, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.6.0-rc1

Aug 15, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.4

Oct 17, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.3

Sep 12, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.2

Jul 18, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.2-RC1

Jul 18, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.1

May 22, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.0

May 2, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

+ const JobScheduled

+ const RepOpSchedule

+ const SeverityCritical

+ const UserGroupTable

+ type Label struct

+ Color string

+ CreationTime time.Time

+ Description string

+ ID int64

+ Level string

+ Name string

+ ProjectID int64

+ Scope string

+ UpdateTime time.Time

+ func (l *Label) TableName() string

+ func (l *Label) Valid(v *validation.Validation)

+ type LabelQuery struct

+ Level string

+ Name string

+ ProjectID int64

+ Scope string

+ type LdapGroup struct

+ GroupDN string

+ GroupName string

+ type LdapGroupConf struct

+ LdapGroupBaseDN string

+ LdapGroupFilter string

+ LdapGroupNameAttribute string

+ LdapGroupSearchScope int

type LdapUser

+ GroupDNList []string

type Member

+ EntityID int

+ EntityType string

+ Entityname string

+ ProjectID int64

+ type MemberReq struct

+ MemberGroup UserGroup

+ MemberUser User

+ ProjectID int64

+ Role int

type RepJob

+ UUID string

+ type RepJobQuery struct

+ EndTime *time.Time

+ Operations []string

+ PolicyID int64

+ Repository string

+ StartTime *time.Time

+ Statuses []string

+ type RepositoryQuery struct

+ LabelID int64

+ Name string

+ ProjectIDs []int64

+ ProjectName string

+ type ResourceLabel struct

+ CreationTime time.Time

+ ID int64

+ LabelID int64

+ ResourceID int64

+ ResourceName string

+ ResourceType string

+ UpdateTime time.Time

+ func (r *ResourceLabel) TableName() string

+ type ResourceLabelQuery struct

+ LabelID int64

+ ResourceID int64

+ ResourceName string

+ ResourceType string

type ScanJob

+ UUID string

+ type UserGroup struct

+ GroupName string

+ GroupType int

+ ID int

+ LdapGroupDN string

+ func (u *UserGroup) TableName() string

+ type UserMember struct

+ ID int

+ Role int

+ Rolename string

+ Username string

v1.5.0-rc5

May 2, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.0-rc4

May 1, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.0-rc3

Apr 25, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.0-rc2

Apr 20, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.5.0-rc1

Apr 16, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.4.1

May 10, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.4.0

Feb 6, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

Changes in this version

+ const ClairVulnTimestampTable

+ const DEVELOPER

+ const GUEST

+ const JobCanceled

+ const JobContinue

+ const JobError

+ const JobFinished

+ const JobPending

+ const JobRetrying

+ const JobRunning

+ const JobStopped

+ const PROJECTADMIN

+ const ProMetaAutoScan

+ const ProMetaEnableContentTrust

+ const ProMetaPreventVul

+ const ProMetaPublic

+ const ProMetaSeverity

+ const ProjectTable

+ const RepJobTable

+ const RepOpDelete

+ const RepOpTransfer

+ const RepPolicyTable

+ const RepTargetTable

+ const RepoTable

+ const ScanAllDaily

+ const ScanAllDailyTime

+ const ScanAllNone

+ const ScanAllOnRefresh

+ const ScanJobTable

+ const ScanOverviewTable

+ const SeverityHigh

+ const SeverityLow

+ const SeverityMedium

+ const SeverityNone

+ const UISecretCookie

+ const UserTable

+ var DefaultScanAllPolicy = ScanAllPolicy

+ type AccessLog struct

+ GUID string

+ LogID int

+ OpTime time.Time

+ Operation string

+ ProjectID int64

+ RepoName string

+ RepoTag string

+ Username string

+ type Actor struct

+ Name string

+ type AuthModel struct

+ Password string

+ Principal string

+ type BaseProjectCollection struct

+ Member string

+ Public bool

+ type ClairError struct

+ Message string

+ type ClairFeature struct

+ AddedBy string

+ Name string

+ NamespaceName string

+ Version string

+ VersionFormat string

+ Vulnerabilities []ClairVulnerability

+ type ClairLayer struct

+ Features []ClairFeature

+ Format string

+ Headers map[string]string

+ Name string

+ NamespaceNames []string

+ ParentName string

+ Path string

+ type ClairLayerEnvelope struct

+ Error *ClairError

+ Layer *ClairLayer

+ type ClairNamespace struct

+ Name string

+ VersionFormat string

+ type ClairNamespaceEnvelope struct

+ Error *ClairError

+ Namespaces *[]ClairNamespace

+ type ClairNamespaceTimestamp struct

+ Namespace string

+ Timestamp int64

+ type ClairNotification struct

+ Created string

+ Deleted string

+ Limit int

+ Name string

+ New *ClairVulnerabilityWithLayers

+ NextPage string

+ Notified string

+ Old *ClairVulnerabilityWithLayers

+ Page string

+ type ClairNotificationEnvelope struct

+ Error *ClairError

+ Notification *ClairNotification

+ type ClairOrderedLayerName struct

+ Index int

+ LayerName string

+ type ClairVulnTimestamp struct

+ ID int64

+ LastUpdate time.Time

+ LastUpdateUTC int64

+ Namespace string

+ func (ct *ClairVulnTimestamp) TableName() string

+ type ClairVulnerability struct

+ Description string

+ FixedBy string

+ FixedIn []ClairFeature

+ Link string

+ Metadata map[string]interface{}

+ Name string

+ NamespaceName string

+ Severity string

+ type ClairVulnerabilityStatus struct

+ Details []ClairNamespaceTimestamp

+ OverallUTC int64

+ type ClairVulnerabilityWithLayers struct

+ OrderedLayersIntroducingVulnerability []ClairOrderedLayerName

+ Vulnerability *ClairVulnerability

+ type ComponentsOverview struct

+ Summary []*ComponentsOverviewEntry

+ Total int

+ type ComponentsOverviewEntry struct

+ Count int

+ Sev int

+ type ConfigEntry struct

+ ID int64

+ Key string

+ Value string

+ func (ce *ConfigEntry) TableName() string

+ type Database struct

+ MySQL *MySQL

+ SQLite *SQLite

+ Type string

+ type Email struct

+ From string

+ Host string

+ Identity string

+ Insecure bool

+ Password string

+ Port int

+ SSL bool

+ Username string

+ type Event struct

+ Action string

+ Actor *Actor

+ ID string

+ Request *Request

+ Target *Target

+ TimeStamp time.Time

+ type ImageScanReq struct

+ Repo string

+ Tag string

+ type ImgScanOverview struct

+ CompOverview *ComponentsOverview

+ CompOverviewStr string

+ CreationTime time.Time

+ DetailsKey string

+ Digest string

+ ID int64

+ JobID int64

+ Sev int

+ Status string

+ UpdateTime time.Time

+ func (iso *ImgScanOverview) TableName() string

+ type LdapConf struct

+ LdapBaseDn string

+ LdapConnectionTimeout int

+ LdapFilter string

+ LdapScope int

+ LdapSearchDn string

+ LdapSearchPassword string

+ LdapUID string

+ LdapURL string

+ LdapVerifyCert bool

+ type LdapFailedImportUser struct

+ Error string

+ UID string

+ type LdapImportUser struct

+ LdapUIDList []string

+ type LdapUser struct

+ DN string

+ Email string

+ Realname string

+ Username string

+ type LogQueryParam struct

+ BeginTime *time.Time

+ EndTime *time.Time

+ Operations []string

+ Pagination *Pagination

+ ProjectIDs []int64

+ Repository string

+ Tag string

+ Username string

+ type Member struct

+ ID int

+ Role int

+ Rolename string

+ Username string

+ type MemberQuery struct

+ Name string

+ Role int

+ type MySQL struct

+ Database string

+ Host string

+ Password string

+ Port int

+ Username string

+ type Notification struct

+ Events []Event

+ type Pagination struct

+ Page int64

+ Size int64

+ type PostGreSQL struct

+ Database string

+ Host string

+ Password string

+ Port int

+ Username string

+ type Project struct

+ CreationTime time.Time

+ Deleted int

+ Metadata map[string]string

+ Name string

+ OwnerID int

+ OwnerName string

+ ProjectID int64

+ RepoCount int

+ Role int

+ Togglable bool

+ UpdateTime time.Time

+ func (p *Project) AutoScan() bool

+ func (p *Project) ContentTrustEnabled() bool

+ func (p *Project) GetMetadata(key string) (string, bool)

+ func (p *Project) IsPublic() bool

+ func (p *Project) SetMetadata(key, value string)

+ func (p *Project) Severity() string

+ func (p *Project) TableName() string

+ func (p *Project) VulPrevented() bool

+ type ProjectMetadata struct

+ CreationTime time.Time

+ Deleted int

+ ID int64

+ Name string

+ ProjectID int64

+ UpdateTime time.Time

+ Value string

+ type ProjectQueryParam struct

+ Member *MemberQuery

+ Name string

+ Owner string

+ Pagination *Pagination

+ ProjectIDs []int64

+ Public *bool

+ type ProjectQueryResult struct

+ Projects []*Project

+ Total int64

+ type ProjectRequest struct

+ Metadata map[string]string

+ Name string

+ Public *int

+ type ProjectSorter struct

+ Projects []*Project

+ func (ps *ProjectSorter) Len() int

+ func (ps *ProjectSorter) Less(i, j int) bool

+ func (ps *ProjectSorter) Swap(i, j int)

+ type RepJob struct

+ CreationTime time.Time

+ ID int64

+ Operation string

+ PolicyID int64

+ Repository string

+ Status string

+ TagList []string

+ Tags string

+ UpdateTime time.Time

+ func (r *RepJob) TableName() string

+ type RepPolicy struct

+ CreationTime time.Time

+ Deleted int

+ Description string

+ Filters string

+ ID int64

+ Name string

+ ProjectID int64

+ ReplicateDeletion bool

+ TargetID int64

+ Trigger string

+ UpdateTime time.Time

+ func (r *RepPolicy) TableName() string

+ type RepTarget struct

+ CreationTime time.Time

+ ID int64

+ Insecure bool

+ Name string

+ Password string

+ Type int

+ URL string

+ UpdateTime time.Time

+ Username string

+ func (r *RepTarget) TableName() string

+ func (r *RepTarget) Valid(v *validation.Validation)

+ type RepoRecord struct

+ CreationTime time.Time

+ Description string

+ Name string

+ ProjectID int64

+ PullCount int64

+ RepositoryID int64

+ StarCount int64

+ UpdateTime time.Time

+ func (rp *RepoRecord) TableName() string

+ type Request struct

+ ID string

+ Method string

+ UserAgent string

+ type Role struct

+ Name string

+ RoleCode string

+ RoleID int

+ RoleMask int

+ type SQLite struct

+ File string

+ type ScanAllPolicy struct

+ Parm map[string]interface{}

+ Type string

+ type ScanJob struct

+ CreationTime time.Time

+ Digest string

+ ID int64

+ Repository string

+ Status string

+ Tag string

+ UpdateTime time.Time

+ func (s *ScanJob) TableName() string

+ type SchemaVersion struct

+ Version string

+ type Severity int64

+ const SevHigh

+ const SevLow

+ const SevMedium

+ const SevNone

+ const SevUnknown

+ func (sev Severity) String() string

+ type Target struct

+ Digest string

+ MediaType string

+ Repository string

+ Tag string

+ URL string

+ type Token struct

+ ExpiresIn int

+ IssuedAt string

+ Token string

+ type UAASettings struct

+ ClientID string

+ ClientSecret string

+ Endpoint string

+ VerifyCert bool

+ type User struct

+ Comment string

+ CreationTime time.Time

+ Deleted int

+ Email string

+ HasAdminRole int

+ Password string

+ Realname string

+ ResetUUID string

+ Role int

+ Rolename string

+ Salt string

+ UpdateTime time.Time

+ UserID int

+ Username string

+ func (u *User) TableName() string

+ type UserQuery struct

+ Email string

+ Pagination *Pagination

+ Username string

+ type VulnerabilityItem struct

+ Description string

+ Fixed string

+ ID string

+ Link string

+ Pkg string

+ Severity Severity

+ Version string

+ type WatchItem struct

+ CreationTime time.Time

+ ID int64

+ Namespace string

+ OnDeletion bool

+ OnPush bool

+ PolicyID int64

+ UpdateTime time.Time

+ func (w *WatchItem) TableName() string

v1.4.0-rc2

Feb 2, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor

v1.4.0-rc1

Jan 23, 2018 GO-2022-0785 +11 more

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

GO-2026-4845: Harbor allows the use of the default password for web UI login in github.com/goharbor/harbor