Linuxfoundation: >> Harbor >> 2.5.4 Security Vulnerabilities
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI.
CVSS Score
9.4
EPSS Score
0.005
Published
2026-03-23
Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations.
CVSS Score
6.4
EPSS Score
0.004
Published
2024-08-02