Description
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/goharbor/harbor | >= 1.7.0, < 1.8.6 | 1.8.6 | GHSA-jr34-mff8-pc6f |
| Go | github.com/goharbor/harbor | >= 1.9.0, < 1.9.3 | 1.9.3 | GHSA-jr34-mff8-pc6f |
| Go | github.com/goharbor/harbor | >= 1.7.0, < 1.8.6 · >= 1.9.0, < 1.9.3 | 1.8.6, 1.9.3 | GO-2022-0853 |