tocsin

CVE-2025-32019

2 advisories.

Go/github.com/goharbor/harbor CVE-2025-32019: medium 4.1, EPSS 0.34%

Harbor repository description page has Cross-site Scripting vulnerability

Action: Upgrade github.com/goharbor/harbor to 2.4.0-rc1.0.20250421072404-a13a16383a41 or later.

go get github.com/goharbor/harbor@v2.12.4-rc1
go get github.com/goharbor/harbor@v2.13.1-rc1
go get github.com/goharbor/harbor@v2.4.0-rc1.0.20250421072404-a13a16383a41

Affected

introducedfixedlast affected
2.12.0-rc12.12.4-rc1-
2.13.0-rc12.13.1-rc1-
2.4.0-rc1.1-2.11.2
02.4.0-rc1.0.20250421072404-a13a16383a41-

Fixed versions

2.12.4-rc12.13.1-rc12.4.0-rc1.0.20250421072404-a13a16383a41

Sources

CVE-2025-32019 · published · modified · JSON

Go/github.com/goharbor/harbor CVE-2025-32019: unknown, EPSS 0.34%

Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

Action: Upgrade github.com/goharbor/harbor to 2.12.4-rc1+incompatible or later.

go get github.com/goharbor/harbor@v2.12.4-rc1+incompatible
go get github.com/goharbor/harbor@v2.13.1-rc1+incompatible

Affected

introducedfixedlast affected
0--
0--
2.12.0-rc1+incompatible2.12.4-rc1+incompatible-
2.13.0-rc1+incompatible2.13.1-rc1+incompatible-

Fixed versions

2.12.4-rc1+incompatible2.13.1-rc1+incompatible

Sources

CVE-2025-32019 · published · modified · JSON