tocsin

Go/github.com/goharbor/harbor CVE-2025-32019: medium 4.1, EPSS 0.37%

Harbor repository description page has Cross-site Scripting vulnerability

Action: Upgrade github.com/goharbor/harbor to 2.4.0-rc1.0.20250421072404-a13a16383a41 or later.

go get github.com/goharbor/harbor@v2.12.4-rc1
go get github.com/goharbor/harbor@v2.13.1-rc1
go get github.com/goharbor/harbor@v2.4.0-rc1.0.20250421072404-a13a16383a41

Affected

introducedfixedlast affected
2.12.0-rc12.12.4-rc1-
2.13.0-rc12.13.1-rc1-
2.4.0-rc1.1-2.11.2
02.4.0-rc1.0.20250421072404-a13a16383a41-

Fixed versions

2.12.4-rc12.13.1-rc12.4.0-rc1.0.20250421072404-a13a16383a41

Sources

CVE-2025-32019 · published · modified · JSON