{"action":"Upgrade github.com/goharbor/harbor to 2.12.4-rc1+incompatible or later.","affected":[{"introduced":"0"},{"introduced":"0"},{"fixed":"2.12.4-rc1+incompatible","introduced":"2.12.0-rc1+incompatible"},{"fixed":"2.13.1-rc1+incompatible","introduced":"2.13.0-rc1+incompatible"}],"component":"github.com/goharbor/harbor","cve_ids":["CVE-2025-32019"],"ecosystem":"Go","epss":0.00368,"exploited":false,"fixed_versions":["2.12.4-rc1+incompatible","2.13.1-rc1+incompatible"],"ghsa_id":"GHSA-f9vc-vf3r-pqqq","id":"tcs_01M5KG9HX7EVYK58A4FBEFY47T","modified_at":"2026-03-03T04:56:44.465444Z","published_at":"2025-07-29T18:49:33Z","references":["https://osv.dev/vulnerability/GO-2025-3825","https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq","https://nvd.nist.gov/vuln/detail/CVE-2025-32019","https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058","https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088","https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GO-2025-3825","url":"https://osv.dev/vulnerability/GO-2025-3825"},{"source":"nvd","source_id":"CVE-2025-32019","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32019"}],"summary":"Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor"}