Affected by GO-2022-0704 and 12 other vulnerabilities

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

core

command

v1.8.4 Latest Latest Go to latest Published: Sep 27, 2019 License: Apache-2.0 Imports: 28 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

There is no documentation for this package.

Path	Synopsis
api
models
auth
authproxy
authproxy/test
db
ldap
uaa
config Package config provide config for core api and other modules Before accessing user settings, need to call Load() For system settings, no need to call Load()	Package config provide config for core api and other modules Before accessing user settings, need to call Load() For system settings, no need to call Load()
controllers
filter
test
label
notifier
promgr
metamgr
pmsdriver
pmsdriver/admiral
pmsdriver/local
proxy
service
notifications/admin
notifications/clair
notifications/jobs
notifications/registry
token
systeminfo
imagestorage
imagestorage/filesystem
utils Package utils contains methods to support security, cache, and webhook functions.	Package utils contains methods to support security, cache, and webhook functions.