tocsin

Go/github.com/goharbor/harbor CVE-2025-30086: medium 4.9, EPSS 0.71%

Possible ORM Leak Vulnerability in the Harbor

Action: Upgrade github.com/goharbor/harbor to 2.4.0-rc1.0.20250331071157-dce7d9f5cffb or later.

go get github.com/goharbor/harbor@v2.13.1
go get github.com/goharbor/harbor@v2.12.4
go get github.com/goharbor/harbor@v2.4.0-rc1.0.20250331071157-dce7d9f5cffb

Affected

introducedfixedlast affected
2.13.02.13.1-
2.4.0-rc1.12.12.4-
02.4.0-rc1.0.20250331071157-dce7d9f5cffb-

Fixed versions

2.13.12.12.42.4.0-rc1.0.20250331071157-dce7d9f5cffb

Sources

CVE-2025-30086 · published · modified · JSON