harbor Helm chart
sb-helm-chartsScored 14 Sept 2026
Private container registry with vulnerability scanning and image signing
Latest 0.3.0 9 months agoapp version 2.11.1 0Artifact Hub
harbor 0.3.0 deploys 2 container images: goharbor/harbor-core and goharbor/registry-photon. Across them, 197 findings — 0 critical, 1 high. The highest contribution is GHSA-v23v-6jw2-98fq in github.com/docker/docker v24.0.9+incompatible, fixed in 25.0.6.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
2 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| goharbor/ | v2.11.1 | 0112126 | 1,281 |
| goharbor/ | v2.11.1 | 00058 | 399 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
139 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| High | GHSA-v23v-6jw2-98fq | github.com/ | 25.0.6 |
| Medium | GHSA-5cgq-3rg8-m6cv | golang.org/ | 0.52.0 |
| Medium | GHSA-v778-237x-gjrc | golang.org/ | 0.31.0 |
| Medium | GHSA-p77j-4mvh-x3m3 | google.golang.org/ | 1.79.3 |
| Medium | GO-2026-4887 | github.com/ | no fix listed |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-2j42-h78h-q4fg | github.com/ | 2.3.6 |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-r6qh-j42j-pw64 | github.com/ | 2.2.1 |
| Medium | GHSA-6v2p-p543-phr9 | golang.org/ | 0.27.0 |
| Low | GHSA-89gr-r52h-f8rx | golang.org/ | 0.52.0 |
| Low | GHSA-jppx-rxg9-jmrx | golang.org/ | 0.52.0 |
| Low | GHSA-mh63-6h87-95cp | github.com/ | 5.2.2 |
| Low | GHSA-wr3p-r5fj-wf97 | github.com/ | 2.2.1 |
| Low | GHSA-78h2-9frx-2jm8 | github.com/ | 4.1.4 |
| Low | GHSA-jqcq-xjh3-6g23 | github.com/ | no fix listed |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-557j-xg8c-q2mm | helm.sh/ | 3.17.4 |
| Low | GHSA-q4h4-gmj2-qvw2 | golang.org/ | 0.52.0 |
| Low | GHSA-w879-237q-wc7r | golang.org/ | 0.52.0 |
| Low | GHSA-f2g3-hh2r-cwgc | github.com/ | no fix listed |
| Low | GHSA-p436-gjf2-799p | github.com/ | 29.2.0 |
| Low | GHSA-pjcq-xvwq-hhpj | github.com/ | 0.1.1 |
| Low | GO-2026-4341 | stdlib | 1.24.12 |
| Low | GHSA-5xqw-8hwv-wg92 | helm.sh/ | 3.17.3 |
| Low | GHSA-c6gw-w398-hv78 | github.com/ | 4.0.5 |
| Low | GHSA-4hfp-h4cw-hj8p | helm.sh/ | 3.17.3 |
| Low | GHSA-pxq6-2prw-chj9 | github.com/ | no fix listed |
| Low | GHSA-3p65-76g6-3w7r | github.com/ | no fix listed |
| Low | GHSA-9j3m-fr7q-jxfw | github.com/ | 2.3.4 |
| Low | GHSA-hfvc-g4fc-pqhx | go.opentelemetry.io/ | 1.43.0 |
| Low | GHSA-45gg-vh54-h5m9 | golang.org/ | 0.52.0 |
| Low | GHSA-9h84-qmv7-982p | helm.sh/ | 3.18.5 |
| Low | GHSA-f9f8-9pmf-xv68 | helm.sh/ | 3.18.5 |
| Low | GHSA-5cv4-jp36-h3mw | golang.org/ | 0.55.0 |
| Low | GHSA-j5w8-q4qc-rx2x | golang.org/ | 0.45.0 |
| Low | GHSA-vvgc-356p-c3xw | golang.org/ | 0.38.0 |
| Low | GHSA-rq77-p4h8-4crw | github.com/ | 1.7.3 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | GHSA-qpw4-5x99-6vjp | golang.org/ | 0.52.0 |
| Low | GHSA-f6x5-jh6r-wrfv | golang.org/ | 0.45.0 |
| Low | GHSA-78mq-xcr3-xm33 | golang.org/ | 0.52.0 |
| Low | GHSA-6pjf-3r9x-m592 | github.com/ | no fix listed |
| Low | GO-2024-3106 | stdlib | 1.22.7 |
| Low | GHSA-hrxh-6v49-42gf | google.golang.org/ | 1.82.1 |
| Low | GO-2024-3107 | stdlib | 1.22.7 |
| Low | GHSA-cp6g-7hqx-qxhp | go.mongodb.org/ | 1.17.7 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/sb-helm-charts/harbor)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.