CVE-2024-22261: Linuxfoundation Harbor

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SQL-Injection in Harbor allows priviledge users to leak the task IDs

Affected products

• Linuxfoundation Harbor: from 2.8.1, before 2.8.6 (fixed in 2.8.6); from 2.9.0, before 2.9.4 (fixed in 2.9.4); from 2.10.0, before 2.10.2 (fixed in 2.10.2)

Published 2024-06-11. Last modified 2026-06-17.