Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor

Description

References

• goharbor/harbor security advisory · ADVISORY
• goharbor/harbor commit 85e7564 · FIX

github.com/goharbor/harbor 的其他漏洞

• GHSA-prh4-vhfh-24mj中危Harbor: LDAP password and OIDC secret are not redacted in the audit log
• CVE-2026-4404严重 9.4Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to t…
• CVE-2025-30086中危 4.9CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak presen…
• CVE-2025-32019中危 4.1Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as …
• CVE-2022-31671高危 7.4Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a …