GHSA-prh4-vhfh-24mj: Harbor: LDAP password and OIDC secret are not redacted in the audit log

March 26, 2026

Harbor write configuration payload to audit log when configuration change, the ldap_search_password and oidc_client_secret will be logged in the audit log without redacted

References

github.com/advisories/GHSA-prh4-vhfh-24mj
github.com/goharbor/harbor
github.com/goharbor/harbor/commit/85e756486fc19333c5c300d7ac273e1580dc9350
github.com/goharbor/harbor/security/advisories/GHSA-prh4-vhfh-24mj

Code Behaviors & Features

Detect and mitigate GHSA-prh4-vhfh-24mj with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →