harbor 1.19.4 Helm chart
wenerNot scored yet
An open source trusted cloud native registry that stores, signs, and scans content
Version 1.19.4 yesterdayapp version 2.15.4 1Artifact Hub
harbor 1.19.4 deploys 8 container images: goharbor/harbor-core, goharbor/harbor-jobservice, goharbor/harbor-portal, goharbor/registry-photon and 4 more. The highest contribution is GO-2026-4919 in github.com/aquasecurity/trivy v0.75.0+dirty, with no fix listed.
Radar Score
Not yet scored
The daily scoring run has not folded the 8 images into a score yet.
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| goharbor/ | v2.15.4 | 00329 | 339 |
| goharbor/ | v2.15.4 | 00323 | 280 |
| goharbor/ | v2.15.4 | 0000 | 0 |
| goharbor/ | v2.15.4 | 00622 | 317 |
| goharbor/ | v2.15.4 | 00628 | 370 |
| goharbor/ | v2.15.4 | 0000 | 0 |
| goharbor/ | v2.15.4 | — | not yet scanned |
| goharbor/ | v2.15.4 | 10319 | 334 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GO-2026-4919KEV | github.com/ | no fix listed |
| Medium | GHSA-h62f-wm92-2cmw | github.com/ | 2.7.0-rc.0 |
| Medium | GO-2026-6604 | stdlib | 1.26.9 |
| Medium | GO-2026-6612 | stdlib | 1.26.9 |
| Medium | GO-2026-6612 | golang.org/ | 0.60.0 |
| Medium | GHSA-44r7-7p62-q3fr | github.com/ | 1.1.25 |
| Medium | GHSA-hqxw-f8mx-cpmw | github.com/ | 2.8.2-beta.1 |
| Low | GHSA-f2g3-hh2r-cwgc | github.com/ | no fix listed |
| Low | GO-2026-6603 | golang.org/ | 0.60.0 |
| Low | GO-2026-6603 | stdlib | 1.26.9 |
| Low | GO-2026-6611 | golang.org/ | 0.60.0 |
| Low | GO-2026-6611 | stdlib | 1.26.9 |
| Low | GO-2025-3460 | github.com/ | no fix listed |
| Low | GHSA-pjcq-xvwq-hhpj | github.com/ | 0.1.1 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2026-6608 | stdlib | 1.26.9 |
| Low | GO-2026-6607 | stdlib | 1.26.9 |
| Low | GHSA-3p65-76g6-3w7r | github.com/ | no fix listed |
| Low | GO-2026-6609 | stdlib | 1.26.9 |
| Low | GO-2026-5841 | github.com/ | 1.18.7 |
| Low | GO-2026-6613 | stdlib | 1.26.9 |
| Low | GO-2026-6605 | stdlib | 1.26.9 |
| Low | GO-2026-6610 | golang.org/ | 0.60.0 |
| Low | GO-2026-6610 | stdlib | 1.26.9 |
| Low | GHSA-rq77-p4h8-4crw | github.com/ | 1.7.3 |
| Low | GHSA-6pjf-3r9x-m592 | github.com/ | no fix listed |
| Low | GHSA-685w-q87j-wqw3 | github.com/ | no fix listed |
| Low | GO-2022-0646 | github.com/ | no fix listed |
| Low | GHSA-82ff-hg59-8x73 | github.com/ | no fix listed |
| Low | GHSA-92cp-5422-2mw7 | github.com/ | 9.6.3 |
| Low | GO-2026-6599 | stdlib | 1.26.9 |
| Low | GO-2026-6600 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | stdlib | 1.26.9 |
| Low | GO-2026-6617 | golang.org/ | 0.60.0 |
| Low | GHSA-hr2v-4r36-88hr | helm.sh/ | 3.20.2 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
| Low | GO-2022-0635 | github.com/ | no fix listed |
| Low | GHSA-qq97-vm5h-rrhg | github.com/ | 2.8.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
| Low | GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/ | 1.45.0 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 1.19.4latest | yesterday | 2.15.4 | — | — |
| 1.19.2 | 2 months ago | 2.15.2 | 1053239 | 3,440 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.