How many Linux Foundation harbor CVEs are in CISA KEV?

None of Linux Foundation harbor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Linux Foundation harbor are affected?

61 distinct Linux Foundation harbor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Linux Foundation harbor CVEs?

Linux Foundation harbor's CVEs most often map to these CWE weakness types: CWE-285 (Improper Authorization), CWE-204 (Observable Response Discrepancy), CWE-269 (Improper Privilege Management), CWE-306 (Missing Authentication for Critical Function).

What is the average severity of Linux Foundation harbor CVEs?

The average CVSS base score across Linux Foundation harbor's scored CVEs is 6.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Linux Foundation

23 CVEs

Linux Foundation harbor Vulnerabilities

Name: Linux Foundation harbor vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for harbor by Linux Foundation.

23

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.6

Avg CVSS

2017–2024

Last updated November 14, 2024

Overview

Linux Foundation harbor has 23 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Linux Foundation harbor, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Linux Foundation harbor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High11

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Linux Foundation harbor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Linux Foundation harbor's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Linux Foundation harbor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.0.0 <= v < 2.4.36 CVEs
2.5.0 <= v < 2.5.26 CVEs
1.7.0 <= v < 1.8.64 CVEs
1.9.0 <= v < 1.9.34 CVEs
1.9.0 <= v <= 1.9.03 CVEs
< 1.10.171 CVE
< 1.10.31 CVE
< 1.3.01 CVE
< 2.0.11 CVE
< 2.9.51 CVE
1.0.0 <= v < 1.10.131 CVE
1.1.0 <= v <= 2.5.31 CVE
1.3.0 <= v <= 1.3.01 CVE
1.7.0 <= v <= 1.7.01 CVE
1.7.0 <= v <= 1.7.61 CVE
1.7.1 <= v <= 1.7.11 CVE
1.7.2 <= v <= 1.7.21 CVE
1.7.3 <= v <= 1.7.31 CVE
1.7.4 <= v <= 1.7.41 CVE
1.7.5 <= v <= 1.7.51 CVE
1.8.0 <= v <= 1.8.01 CVE
1.8.0 <= v <= 1.8.31 CVE
1.8.0 <= v <= 1.8.51 CVE
1.8.1 <= v <= 1.8.11 CVE
1.8.2 <= v <= 1.8.21 CVE
1.9.0 <= v < 2.0.31 CVE
1.9.1 <= v <= 1.9.11 CVE
2.0 <= v < 2.0.51 CVE
2.0.0 <= v < 2.0.11 CVE
2.1.0 <= v < 2.1.21 CVE
2.10.0 <= v < 2.10.21 CVE
2.10.0 <= v < 2.10.31 CVE
2.10.0 <= v <= 2.10.01 CVE
2.6.0 <= v <= 2.6.41 CVE
2.7.0 <= v < 2.7.31 CVE
2.8.0 <= v < 2.8.31 CVE
2.8.0 <= v < 2.8.51 CVE
2.8.1 <= v < 2.8.61 CVE
2.9.0 <= v < 2.9.31 CVE
2.9.0 <= v < 2.9.41 CVE

Fixed in

2.4.36 CVEs
2.5.26 CVEs
1.8.64 CVEs
1.9.34 CVEs
2.0.12 CVEs
1.10.131 CVE
1.10.171 CVE
1.10.31 CVE
1.3.01 CVE
2.0.31 CVE
2.0.51 CVE
2.1.21 CVE
2.10.21 CVE
2.10.31 CVE

Find a version

23 CVEs

Sort

User permission validation failure and disclosure of P2P preheat execution logs
CVE-2022-31668
Patch
CWE-285
High · CVSS 7.7
EPSS 0.3% (22th pct)2024-11-14
Medium vulnerability · 2024-11-14
CVE-2022-31667
Patch
CWE-285
Medium · CVSS 6.4
EPSS 0.5% (39th pct)2024-11-14
High vulnerability · 2024-11-14
CVE-2022-31669
Patch
CWE-285
High · CVSS 7.7
EPSS 0.4% (32th pct)2024-11-14
High vulnerability · 2024-11-14
CVE-2022-31670
Patch
CWE-285
High · CVSS 7.7
EPSS 0.5% (41th pct)2024-11-14
High vulnerability · 2024-11-14
CVE-2022-31671
Patch
CWE-285
High · CVSS 7.4
EPSS 0.5% (40th pct)2024-11-14
Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies
CVE-2022-31666
Patch
CWE-285
High · CVSS 7.7
EPSS 0.5% (39th pct)2024-11-14
Harbor fails to validate the user permissions when updating project configurations
CVE-2024-22278
Patch
CWE-269
Medium · CVSS 6.4
EPSS 0.4% (29th pct)2024-08-02
SQL Injection in Harbor scan log API
CVE-2024-22261
Patch
CWE-566
Medium · CVSS 5.5
EPSS 0.4% (34th pct)2024-06-10
Medium vulnerability · 2024-06-10
CVE-2024-22244
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.4% (29th pct)2024-06-10
Timing attack risk in Harbor
CVE-2023-20902
Patch
Medium · CVSS 6.5
EPSS 0.4% (30th pct)2023-11-09
High vulnerability · 2023-01-12
CVE-2022-46463
Patch
CWE-306
High · CVSS 7.5
EPSS 6.2% (93th pct)2023-01-12
Medium vulnerability · 2022-12-26
CVE-2019-19030
Public exploit
Patch
CWE-204
Medium · CVSS 5.3
EPSS 1.9% (77th pct)2022-12-26
Medium vulnerability · 2021-02-02
CVE-2020-29662
Patch
Medium · CVSS 5.3
EPSS 0.7% (50th pct)2021-02-02
Medium vulnerability · 2020-09-29
CVE-2020-13794
Patch
Medium · CVSS 4.3
EPSS 1.3% (66th pct)2020-09-29
Medium vulnerability · 2020-07-15
CVE-2020-13788
Patch
Medium · CVSS 4.3
EPSS 1.3% (67th pct)2020-07-15
High vulnerability · 2020-03-20
CVE-2019-19023
Patch
High · CVSS 8.8
EPSS 1.6% (73th pct)2020-03-20
High vulnerability · 2020-03-20
CVE-2019-19029
Patch
High · CVSS 7.2
EPSS 2.1% (80th pct)2020-03-20
Medium vulnerability · 2020-03-20
CVE-2019-19026
Patch
Medium · CVSS 4.9
EPSS 1.4% (70th pct)2020-03-20
High vulnerability · 2020-03-20
CVE-2019-19025
Patch
High · CVSS 8.8
EPSS 1.0% (60th pct)2020-03-20
Medium vulnerability · 2019-12-03
CVE-2019-3990
Medium · CVSS 4.3
EPSS 1.0% (60th pct)2019-12-03
High vulnerability · 2019-10-18
CVE-2019-16919
Patch
High · CVSS 7.5
EPSS 1.7% (75th pct)2019-10-18
Medium vulnerability · 2019-09-08
CVE-2019-16097
Public exploit
Patch
Medium · CVSS 6.5
EPSS 23.3% (98th pct)2019-09-08
High vulnerability · 2017-12-15
CVE-2017-17697
Patch
High · CVSS 8.6
EPSS 1.4% (69th pct)2017-12-15

Common weakness types

The CWE weakness categories most often found in Linux Foundation harbor CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Linux Foundation harbor CVEs were published each year.

2017

1

2019

3

2020

6

2021

1

2022

1

2023

2

2024

9

Other Linux Foundation products

Browse vulnerabilities for other products by Linux Foundation.

yocto115 CVEs nats-server36 CVEs pytorch31 CVEs everest29 CVEs containerd22 CVEs magma22 CVEs runc17 CVEs iot-yocto15 CVEs

All Linux Foundation vulnerabilities

Frequently asked questions

Common questions about Linux Foundation harbor vulnerabilities.

How many CVEs does Linux Foundation harbor have?: Linux Foundation harbor has 23 published CVE records since 2017.
How many Linux Foundation harbor CVEs are in CISA KEV?: None of Linux Foundation harbor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Linux Foundation harbor vulnerabilities?: Yes — 2 of Linux Foundation harbor's CVEs have a known public exploit.
Which versions of Linux Foundation harbor are affected?: 61 distinct Linux Foundation harbor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Linux Foundation harbor CVEs?: Linux Foundation harbor's CVEs most often map to these CWE weakness types: CWE-285 (Improper Authorization), CWE-204 (Observable Response Discrepancy), CWE-269 (Improper Privilege Management), CWE-306 (Missing Authentication for Critical Function).
What is the average severity of Linux Foundation harbor CVEs?: The average CVSS base score across Linux Foundation harbor's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Linux Foundation harbor vulnerabilities

Monitor new Linux Foundation harbor vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

2.7.3

1 CVE

2.8.31 CVE

2.8.51 CVE

2.8.61 CVE

2.9.31 CVE

2.9.41 CVE

2.9.51 CVE