StackRadar

harbor 1.9.3 Helm chart

kubesphereVerified publisher

Scored 14 Sept 2026

An open source trusted cloud native registry that stores, signs, and scans content

Version 1.9.3 4 years agoapp version 2.5.3 0Artifact Hub

harbor 1.9.3 deploys 11 container images: goharbor/chartmuseum-photon, goharbor/harbor-core, goharbor/harbor-jobservice, goharbor/notary-server-photon and 7 more. Across them, 1,632 findings0 critical, 28 high 7 on CISA KEV. The highest contribution is GHSA-45x7-px36-x8w8 in golang.org/x/crypto v0.0.0-20200302210943-78000ba7a073, fixed in 0.0.0-20231218163308-9d2ee975ef9f.

Radar Score

17,7980282221,380

1,632 findings over 11 of 11 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images
ImageTagVulnerabilitiesRadar Score
goharbor/chartmuseum-photonv2.5.305272072,525
goharbor/harbor-corev2.5.304342152,735
goharbor/harbor-jobservicev2.5.304352102,703
goharbor/notary-server-photonv2.5.303301692,255
goharbor/notary-signer-photonv2.5.303301692,255
goharbor/harbor-portalv2.5.300000
goharbor/registry-photonv2.5.300000
goharbor/harbor-registryctlv2.5.303271632,108
goharbor/harbor-db×3v2.5.300000
goharbor/redis-photonv2.5.300000
goharbor/trivy-adapter-photonv2.5.306392473,217

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

56 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-hqxw-f8mx-cpmwgithub.com/docker/distribution@v2.7.1+incompatible2.8.2-beta.1
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.0.0-20200302210943-78000ba7a0730.52.0
MediumGHSA-r53h-jv2g-vpx6helm.sh/helm/v3@v3.7.13.14.2
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a0730.35.0
MediumGO-2022-1144stdlib@go1.14.151.18.9
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d0.27.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.9.3latest4 years ago2.5.30282221,38017,798

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/kubesphere/harbor.svg)](https://charts.stackradar.io/charts/kubesphere/harbor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.