Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
harbor-registry-fips could let attackers read or modify data
published 9 months ago
Summary
The harbor-registry-fips package uses the go-redis library, which contains several security weaknesses. These flaws could allow an attacker to view or change stored information without permission. Update to the latest released version of harbor-registry-fips that includes the patched go-redis library.
What to do
- Update cleanstart harbor-registry-fips to version 2.7.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | harbor-registry-fips |
< 2.7.1-r0 Fix: upgrade to 2.7.1-r0
|
Original advisory text
go-redis is the official Redis client library for the Go programming language
Multiple security vulnerabilities affect the harbor-registry-fips package. go-redis is the official Redis client library for the Go programming language. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-29923 URL
- https://osv.dev/vulnerability/CVE-2025-61727 URL
- https://osv.dev/vulnerability/CVE-2025-61729 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-29923 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61727 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 URL
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published30 Jan 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-QK01721 · OSV
Track software like this
Free during beta