SUSE Application Collection: harbor-core:2.11.2-23.1

Inactive branch 2.11! This artifact is no longer continuously scanned and new versions are no longer expected.

harbor-core:2.11.2-23.1

Signed

Vulnerability score

Registered 13 days ago

Signed

Vulnerability score

Version:

2.11.2

Revision:

23.1

Architecture:

x86_64

Size:

38.1 MB

Digest:

sha256:ece8f4635a8f55628d5f2d5f4c3c46a04ef7087ca76db7d2d46c9e2a189d697a

Base image

SLE BCI-micro 15.7-61.11

Operating system

SLE 15.7

Attestation

ID	Severity	Package	Installed version	Fixed version
CVE-2025-30223	CRITICAL	Go github.com/beego/beego/v2	v2.2.1	2.3.6
CVE-2026-33186	CRITICAL	Go google.golang.org/grpc	v1.63.2	1.79.3
CVE-2024-45337	HIGH	Go golang.org/x/crypto	v0.22.0	0.31.0
CVE-2024-45338	HIGH	Go golang.org/x/net	v0.24.0	0.33.0
CVE-2025-15558	HIGH	Go github.com/docker/cli	v25.0.1+incompatible	29.2.0
CVE-2025-22868	HIGH	Go golang.org/x/oauth2	v0.19.0	0.27.0
CVE-2025-22869	HIGH	Go golang.org/x/crypto	v0.22.0	0.35.0
CVE-2025-30204	HIGH	Go github.com/golang-jwt/jwt/v5	v5.2.1	5.2.2
CVE-2025-47913	HIGH	Go golang.org/x/crypto	v0.22.0	0.43.0
CVE-2025-53547	HIGH	Go helm.sh/helm/v3	v3.15.2	3.18.4, 3.17.4
CVE-2026-24051	HIGH	Go go.opentelemetry.io/otel/sdk	v1.26.0	1.40.0
CVE-2026-25681	HIGH	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-27136	HIGH	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-32286	HIGH	Go github.com/jackc/pgproto3/v2	v2.3.3	N/A
CVE-2026-33540	HIGH	Go github.com/distribution/distribution	v2.8.2+incompatible	N/A
CVE-2026-33814	HIGH	Go golang.org/x/net	v0.24.0	0.53.0
CVE-2026-34986	HIGH	Go github.com/go-jose/go-jose/v4	v4.0.1	4.1.4
CVE-2026-35172	HIGH	Go github.com/distribution/distribution	v2.8.2+incompatible	N/A
CVE-2026-39821	HIGH	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-39828	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39829	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39830	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39831	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39832	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39835	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39883	HIGH	Go go.opentelemetry.io/otel/sdk	v1.26.0	1.43.0
CVE-2026-41567	HIGH	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-42306	HIGH	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-42508	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-46595	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-46597	HIGH	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-46600	HIGH	Go golang.org/x/net	v0.24.0	0.56.0
CVE-2026-56852	HIGH	Go golang.org/x/text	v0.14.0	0.39.0
CVE-2026-56854	HIGH	Go golang.org/x/crypto	v0.22.0	0.55.0
CVE-2026-84304	HIGH	Go google.golang.org/grpc	v1.63.2	1.83.1
CVE-2026-84445	HIGH	Go google.golang.org/grpc	v1.63.2	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e
GHSA-hrxh-6v49-42gf	HIGH	Go google.golang.org/grpc	v1.63.2	1.82.1
CVE-2024-55885	MEDIUM	Go github.com/beego/beego/v2	v2.2.1	2.3.4
CVE-2025-22870	MEDIUM	Go golang.org/x/net	v0.24.0	0.36.0
CVE-2025-22872	MEDIUM	Go golang.org/x/net	v0.24.0	0.38.0
CVE-2025-24358	MEDIUM	Go github.com/gorilla/csrf	v1.7.2	1.7.3
CVE-2025-27144	MEDIUM	Go github.com/go-jose/go-jose/v4	v4.0.1	4.0.5
CVE-2025-32386	MEDIUM	Go helm.sh/helm/v3	v3.15.2	3.17.3
CVE-2025-32387	MEDIUM	Go helm.sh/helm/v3	v3.15.2	3.17.3
CVE-2025-47909	MEDIUM	Go github.com/gorilla/csrf	v1.7.2	N/A
CVE-2025-47911	MEDIUM	Go golang.org/x/net	v0.24.0	0.45.0
CVE-2025-47914	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.45.0
CVE-2025-55198	MEDIUM	Go helm.sh/helm/v3	v3.15.2	3.18.5
CVE-2025-55199	MEDIUM	Go helm.sh/helm/v3	v3.15.2	3.18.5
CVE-2025-58181	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.45.0
CVE-2025-58190	MEDIUM	Go golang.org/x/net	v0.24.0	0.45.0
CVE-2026-2303	MEDIUM	Go go.mongodb.org/mongo-driver	v1.14.0	1.17.7
CVE-2026-25680	MEDIUM	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-32952	MEDIUM	Go github.com/Azure/go-ntlmssp	v0.0.0-20221128193559-754e69321358	0.1.1
CVE-2026-33997	MEDIUM	Go github.com/docker/docker	v27.3.1+incompatible	29.3.1
CVE-2026-35206	MEDIUM	Go helm.sh/helm/v3	v3.15.2	3.20.2
CVE-2026-39827	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39833	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39834	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-39882	MEDIUM	Go go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.26.0	1.43.0
CVE-2026-41568	MEDIUM	Go github.com/docker/docker	v27.3.1+incompatible	N/A
CVE-2026-41888	MEDIUM	Go github.com/distribution/distribution	v2.8.2+incompatible	N/A
CVE-2026-42502	MEDIUM	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-42506	MEDIUM	Go golang.org/x/net	v0.24.0	0.55.0
CVE-2026-46598	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.52.0
CVE-2026-56855	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.56.0
CVE-2026-78662	MEDIUM	Go golang.org/x/crypto	v0.22.0	0.56.0
CVE-2026-84303	MEDIUM	Go google.golang.org/grpc	v1.63.2	1.83.1
CVE-2025-54410	LOW	Go github.com/docker/docker	v27.3.1+incompatible	25.0.13, 28.0.0
CVE-2026-41889	LOW	Go github.com/jackc/pgx/v4	v4.18.3	N/A
CVE-2026-81870	LOW	Go go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.26.0	1.45.0
CVE-2026-81870	LOW	Go go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.26.0	1.45.0
CVE-2026-81870	LOW	Go go.opentelemetry.io/otel/sdk	v1.26.0	1.45.0
CVE-2026-39824	UNKNOWN	Go golang.org/x/sys	v0.21.0	0.44.0
GO-2026-5932	UNKNOWN	Go golang.org/x/crypto	v0.22.0	N/A

Last vulnerability scan 13 days ago

No vulnerabilities in the CISA KEV Catalog