tocsin

Go/github.com/goharbor/harbor CVE-2025-32019: medium 4.1, EPSS 0.37%

Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

Action: Upgrade github.com/goharbor/harbor to 2.12.4-rc1+incompatible or later.

go get github.com/goharbor/harbor@v2.12.4-rc1+incompatible
go get github.com/goharbor/harbor@v2.13.1-rc1+incompatible

Affected

introducedfixedlast affected
0--
0--
2.12.0-rc1+incompatible2.12.4-rc1+incompatible-
2.13.0-rc1+incompatible2.13.1-rc1+incompatible-

Fixed versions

2.12.4-rc1+incompatible2.13.1-rc1+incompatible

Sources

CVE-2025-32019 · published · modified · JSON