SWE-DIVE evaluates coding agents in multi-turn sessions
A user simulator and conversation validator run inside Harbor to score whether the agent solves the task.
38
Product
Harbor
- Mentions · 7d0
- Mentions · 30d3
- All mentions6
- First seenAug 17, 2026
- Last mentioned9d ago
Timeline
6 articles · newest firstDiscoveryRSI recursively improves scientific hypothesis generation
Automated scores rose from 4.86 to 5.39 after two self-improvement rounds, with larger gains in falsifiability and data resolvability.
36
10 Best Container Registry Security Tools Compared (2026): Features & Pricing
A 2026 roundup compares 10 container registry security tools, led by free Harbor and Trivy.
16
Top 10 Best Container Registry Security Tools in 2026
A 2026 buyer's guide scores ten container registry security tools including Aqua, Snyk, JFrog Xray, Prisma Cloud, and Anchore.
25
Identifying a BOLA Vulnerability in Harbor, a Cloud
Unit 42 found a BOLA flaw, CVE-2024-22278 (CVSS 6.4), letting Maintainers improperly alter Harbor project metadata; fixed in versions 2.9.5, 2.10.3, and 2.11.0.
40
Harnessing LLMs for Automating BOLA Detection
Unit 42's BOLABuster methodology uses LLMs to automate detection of broken object-level authorization vulnerabilities, uncovering flaws in Grafana, Harbor, and Easy!Appointments.
45
Related CVEs
by mentions- CVE-2024-22278<1%4.3Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations
- CVE-2023-3287<1%8.8A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system
- CVE-2023-3288<1%8.8A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system
- CVE-2023-38055<1%8.1A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including…
- CVE-2023-38050<1%8.1A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin)
- CVE-2023-38051<1%8.1A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary)
- CVE-2023-3285<1%7.7A BOLA vulnerability in POST /appointments allows a low privileged user to create an appointment for any user in the system (including admin)
- CVE-2023-3289<1%6.5A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin)
- CVE-2024-1313<1%6.5It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to…
- CVE-2023-3290<1%5.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system
Appears with
- Palo Alto Networksvendor · 4
- Snykvendor · 2
- JFrog Xrayproduct · 2
- Syftproduct · 2
- Dockervendor · 2
- Sysdigvendor · 2
- Anchorevendor · 2
- Grypeproduct · 2
- JFrogvendor · 2
- Unit 42threat actor · 2
- Aqua Securityvendor · 2
- CNCForganization · 2
- Unit 42organization · 2
- Red Hatvendor · 2
- Trivyproduct · 2
- Chainguardvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.