Issues · goharbor/harbor · GitHub

Labels Milestones New issue

Proxy-cache blob responses omit Content-Length (headers set after the body), enabling truncated-fill cache poisoning

#23373

· shrenikgala opened

on Jun 14, 2026

Prepare removes /data/secret/cert entirely, breaking hitless TLS certificate reload workflows

#23363

· gabrielgbs97 opened

on Jun 12, 2026

Multiple admin API endpoints return HTTP 500 ("UNKNOWN") instead of a 4xx on invalid input / unmet preconditions

#23345

· NaivEPoi opened

on Jun 10, 2026

Cache: serializing keyMutex in FetchOrSave + Save() canceled by request context (src/lib/cache)

#23335

· air1bzz opened

on Jun 9, 2026

Adding CVE to allowlists does not work as designed

#23329

· mmrvelj opened

on Jun 8, 2026

SBOM report is destroyed before re-scan; a failed SBOM regeneration loses the prior SBOM

needs/follow-up

#23320

· Vad1mo opened

on Jun 4, 2026

Massive database growth in report_vulnerability_record table linked to Trivy scans

area/performance

#23310

· clemet587 opened

on Jun 2, 2026

[Bug] Registry endpoint access_key column varchar(255) too short for long JWT tokens (e.g. F5/NGINX Plus private registry)

#23303

· Irvan-Warrior opened

on May 30, 2026

Robots are unable to rotate secrets of other robots

area/robot-account

#23299

· 0xC4DE opened

on May 28, 2026

registryctl logs http: Server closed as fatal during graceful shutdown

#23294

· rakshityadav1868 opened

on May 28, 2026

Preset filters values gone in P2P Provider Policy Filters when edit

#23293

· jUDASmILE opened

on May 28, 2026

OIDC users intermittently logged out: SessionRegenerate stores empty session under concurrent requests (v2.15.1)

#23290

· villcabo opened

on May 26, 2026