harbor 1.19.2 Helm chart

Name: harbor Helm chart 1.19.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

wener

Scored 16 Oct 2026

An open source trusted cloud native registry that stores, signs, and scans content

Version 1.19.2 2 months agoapp version 2.15.2 1Artifact Hub

harbor 1.19.2 deploys 8 container images: goharbor/harbor-core, goharbor/harbor-jobservice, goharbor/harbor-portal, goharbor/registry-photon and 4 more. Across them, 293 findings — 1 critical, 0 high — 1 on CISA KEV. The highest contribution is GO-2026-4919 in github.com/aquasecurity/trivy v0.72.0, with no fix listed.

Radar Score

3,4401053239

293 findings over 8 of 8 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

8 images

Image	Tag	Vulnerabilities	Radar Score
goharbor/harbor-core	v2.15.2	00645	563
goharbor/harbor-jobservice	v2.15.2	00638	492
goharbor/harbor-portal	v2.15.2	0000	0
goharbor/registry-photon	v2.15.2	001742	755
goharbor/harbor-registryctl	v2.15.2	001750	819
goharbor/harbor-db×2	v2.15.2	0000	0
goharbor/valkey-photon	v2.15.2	0000	0
goharbor/trivy-adapter-photon	v2.15.2	10764	811

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

18 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	GHSA-cg3q-j54f-5p7p	github.com/prometheus/client_golang@v0.9.0-pre1.0.20180209125602-c332b6f63c06	1.11.1
Medium	GHSA-h62f-wm92-2cmw	github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty	2.7.0-rc.0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a	1.79.3
Medium	GHSA-86r9-39j9-99wp	gopkg.in/square/go-jose.v1@v1.0.1	1.0.4
Medium	GHSA-w73w-5m7g-f7qc	github.com/dgrijalva/jwt-go@v3.2.0+incompatible	no fix listed
Medium	GHSA-77gc-fj98-665h	gopkg.in/square/go-jose.v1@v1.0.1	1.1.0
Medium	GHSA-p55x-7x9v-q8m4	github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f	1.0.4
Medium	GHSA-9jcx-pr2f-qvq5	github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f	1.0.10
Medium	GO-2026-5026	stdlib@go1.26.4	1.25.13
Medium	GO-2026-5026	golang.org/x/net@v0.54.0	0.55.0
Medium	GO-2026-6604	stdlib@go1.26.4	1.26.9
Medium	GHSA-m37j-52j7-pjw7	oras.land/oras-go/v2@v2.6.0	2.6.2
Medium	GO-2026-6612	stdlib@go1.26.4	1.26.9
Medium	GO-2026-6612	golang.org/x/net@v0.55.0	0.60.0
Medium	GHSA-44r7-7p62-q3fr	github.com/miekg/dns@v0.0.0-20161122061214-271c58e0c14f	1.1.25
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.81.1	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.81.1	1.83.1
Medium	GHSA-hqxw-f8mx-cpmw	github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty	2.8.2-beta.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.19.4latest	yesterday	2.15.4	—	—
1.19.2	2 months ago	2.15.2	1053239	3,440

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/wener/harbor.svg)](https://charts.stackradar.io/charts/wener/harbor)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.