Vulnerability Report: GO-2025-3825
- CVE-2025-32019, GHSA-f9vc-vf3r-pqqq
- Affects: github.com/goharbor/harbor, github.com/goharbor/harbor, and 2 more
- Published: Jul 29, 2025
Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. (If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.) The additional affected modules and versions are: github.com/goharbor/harbor before v2.4.0-rc1.0.20250421072404-a13a16383a41.
For detailed information about this vulnerability, visit https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq or https://nvd.nist.gov/vuln/detail/CVE-2025-32019.
Affected Packages
-
PathVersionsSymbols
Aliases
References
- https://github.com/goharbor/harbor/security/advisories/GHSA-f9vc-vf3r-pqqq
- https://nvd.nist.gov/vuln/detail/CVE-2025-32019
- https://github.com/goharbor/harbor/commit/76c2c5f7cfd9edb356cbb373889a59cc3217a058
- https://github.com/goharbor/harbor/commit/a13a16383a41a8e20f524593cb290dc52f86f088
- https://github.com/goharbor/harbor/commit/f019430872118852f83f96cac9c587b89052d1e5
- https://vuln.go.dev/ID/GO-2025-3825.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.