harbor-2.11-portal-nginx-config

Direct Vulnerabilities

Known vulnerabilities in the harbor-2.11-portal-nginx-config package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Uncaught Exception	*
H Off-by-one Error	*
H Authentication Bypass	*
H Improper Validation of Array Index	*
L GHSA-jqcq-xjh3-6g23	*
L Improper Authorization	*
L Cross-site Scripting (XSS)	*
L Direct Request ('Forced Browsing')	*
L Directory Traversal	*
H CVE-2025-15558	*
L Untrusted Search Path	*
C CVE-2025-68121	*
L CVE-2025-61732	*
L CVE-2025-61730	*
L Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2025-61731	*
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L CVE-2025-58181	<2.11.2-r9
L CVE-2025-47914	<2.11.2-r9
L CVE-2025-47912	<2.11.2-r7
L CVE-2025-61725	<2.11.2-r7
L Allocation of Resources Without Limits or Throttling	<2.11.2-r7
L Improper Certificate Validation	<2.11.2-r7
L Algorithmic Complexity	<2.11.2-r7
L Allocation of Resources Without Limits or Throttling	<2.11.2-r7
L Allocation of Resources Without Limits or Throttling	<2.11.2-r7
L Information Exposure Through Log Files	<2.11.2-r7
L CVE-2025-58183	<2.11.2-r7
L CVE-2025-58186	<2.11.2-r7
L Stack-based Buffer Overflow	<2.11.2-r1
M Missing Initialization of Resource	<2.11.2-r6
L CVE-2025-22868	<2.11.2-r4
L Asymmetric Resource Consumption (Amplification)	<2.11.2-r1
L Race Condition	<2.11.2-r5
L CVE-2025-22872	<2.11.2-r1
L CVE-2025-4674	<2.11.2-r4
L CVE-2025-47909	*
L Use of Uninitialized Resource	<2.11.2-r6
L Allocation of Resources Without Limits or Throttling	<2.11.2-r1
C Cross-site Scripting (XSS)	<2.11.2-r3
H Use of a Broken or Risky Cryptographic Algorithm	<2.11.2-r3
H Arbitrary Code Injection	<2.11.2-r4
L CVE-2025-22869	<2.11.2-r1
L Allocation of Resources Without Limits or Throttling	<2.11.2-r1
L CVE-2025-22870	<2.11.2-r1
L CVE-2024-45337	<2.11.2-r1
L Allocation of Resources Without Limits or Throttling	<2.11.2-r6
L CVE-2025-47906	<2.11.2-r5
L Cross-site Request Forgery (CSRF)	<2.11.2-r1

harbor-2.11-portal-nginx-config

Direct Vulnerabilities

Fix vulnerabilities automatically