{"action":"Upgrade github.com/goharbor/harbor to 2.4.0-rc1.0.20250421072404-a13a16383a41 or later.","affected":[{"fixed":"2.12.4-rc1","introduced":"2.12.0-rc1"},{"fixed":"2.13.1-rc1","introduced":"2.13.0-rc1"},{"introduced":"2.4.0-rc1.1","last_affected":"2.11.2"},{"fixed":"2.4.0-rc1.0.20250421072404-a13a16383a41","introduced":"0"}],"component":"github.com/goharbor/harbor","cve_ids":["CVE-2025-32019"],"ecosystem":"Go","epss":0.00368,"exploited":false,"fixed_versions":["2.12.4-rc1","2.13.1-rc1","2.4.0-rc1.0.20250421072404-a13a16383a41"],"ghsa_id":"GHSA-f9vc-vf3r-pqqq","id":"tcs_01M5KF8V7B0X60V9KZHSEG1Q8V","modified_at":"2025-07-29T19:44:46.880538Z","published_at":"2025-07-23T14:40:05Z","references":["https://osv.dev/vulnerability/GHSA-f9vc-vf3r-pqqq","https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq","https://nvd.nist.gov/vuln/detail/CVE-2025-32019","https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058","https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088","https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5","https://github.com/goharbor/harbor"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-f9vc-vf3r-pqqq","url":"https://osv.dev/vulnerability/GHSA-f9vc-vf3r-pqqq"}],"summary":"Harbor repository description page has Cross-site Scripting vulnerability"}