CVE-2026-4404

[senthil13]

Do we have any fixes for the CVE-2026-4404?

• Link
• CVE-2026-4404

Links says fixed at 2.15.1, but there is no 2.15.1 and latest is 2.15.0

Thanks

[stonezdj]

We consider it is not a CVE.

This is also a widely accepted practice. It is a fundamental requirement that users must install Harbor using their own custom password, and this is not considered a vulnerability.

[stonezdj]

See security advisory: GHSA-56j8-6qr5-cg75