CVE-2020-29662: Linuxfoundation Harbor

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

In Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2 the catalog’s registry API is exposed on an unauthenticated path.

Affected products

• Linuxfoundation Harbor: from 2.0, before 2.0.5 (fixed in 2.0.5); from 2.1.0, before 2.1.2 (fixed in 2.1.2)

Published 2021-02-02. Last modified 2026-06-17.