Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor

Mô tả

Tham khảo

• goharbor/harbor security advisory · ADVISORY
• goharbor/harbor commit 85e7564 · FIX

Lỗ hổng khác của github.com/goharbor/harbor

• GHSA-prh4-vhfh-24mjTRUNG BÌNHHarbor: LDAP password and OIDC secret are not redacted in the audit log
• CVE-2026-4404NGHIÊM TRỌNG 9.4Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to t…
• CVE-2025-30086TRUNG BÌNH 4.9CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak presen…
• CVE-2025-32019TRUNG BÌNH 4.1Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as …
• CVE-2022-31671CAO 7.4Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a …