Posted by Khashayar Fereidani on Sep 26# harness registry webhook sort_order blind SQL injection Author: Khashayar Fereidani Disclosure Date: 2026-09-24 Advisory: https://fereidani.com/harness-registry-webhook-sortorder-blind-sql-injection Contact: https://fereidani.com/contact ## Description Harness open source (Gitness) is a self-hosted platform for source control, pipelines and artifact registries. The registry API lists the webhooks of a registry at `GET...