CVE-2025-32019

Published July 23rd, 2025

View on NVD ↗

CVSS v3

4.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed in versions 2.11.3 and 2.12.3.

goharbor/harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

GitHub

28.7K