{"action":"Upgrade github.com/goharbor/harbor to 2.13.5 or later.","affected":[{"fixed":"2.13.5","introduced":"2.13.0"},{"fixed":"2.14.3","introduced":"2.14.0"}],"component":"github.com/goharbor/harbor","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["2.13.5","2.14.3"],"ghsa_id":"GHSA-prh4-vhfh-24mj","id":"tcs_01M5KFHSXYF2F85BRZSRBE2TPH","modified_at":"2026-04-08T05:18:55.793745Z","published_at":"2026-03-26T22:25:26Z","references":["https://osv.dev/vulnerability/GHSA-prh4-vhfh-24mj","https://github.com/goharbor/harbor/security/advisories/GHSA-prh4-vhfh-24mj","https://github.com/goharbor/harbor/commit/85e756486fc19333c5c300d7ac273e1580dc9350","https://github.com/goharbor/harbor"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-prh4-vhfh-24mj","url":"https://osv.dev/vulnerability/GHSA-prh4-vhfh-24mj"}],"summary":"Harbor: LDAP password and OIDC secret are not redacted in the audit log"}