Description
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/goharbor/harbor | >= 1.7.0, < 1.8.6 | 1.8.6 | GHSA-w4x5-jqq4-qc8x |
| Go | github.com/goharbor/harbor | >= 1.9.0, < 1.9.3 | 1.9.3 | GHSA-w4x5-jqq4-qc8x |
| Go | github.com/goharbor/harbor | >= 1.7.0, < 1.8.6 · >= 1.9.0, < 1.9.3 | 1.8.6, 1.9.3 | GO-2022-0883 |