Vulnerability Database

300,926

Total vulnerabilities in the database

CVE-2019-19026

Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform.

Published: Mar 20, 2020
Updated: Nov 9, 2025
CVE: CVE-2019-19026
GHSA: GHSA-w4x5-jqq4-qc8x
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.9
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
linuxfoundation / harbor	1.7.0	1.8.6
linuxfoundation / harbor	1.9.0	1.9.3
github.com/goharbor/harbor	1.7.0	1.8.6
github.com/goharbor/harbor	1.9.0	1.9.3

https://github.com/goharbor/harbor/security/advisories
https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
https://tanzu.vmware.com/security/cve-2019-19026

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo