# Harbor v2.14.6

> Storage & Data · 2026-10-23

A maintenance release with Go dependency updates for security CVEs, default behavior changes, and corrective fixes. It also includes protection against decompression overruns and runtime panics.

## Action needed
- **[security]** Go dependency security updates
  - Go dependencies are upgraded to address security CVEs.

## Check if affected
- **[breaking]** Private network access for `webhook` enabled by default
  - Applies if you use `webhook`.
  - Private network access for `webhook` is allowed by default in this release.
- **[breaking]** Legacy signer pulls for `contenttrust` enabled by default
  - Applies if you use `contenttrust`.
  - Legacy signer pulls are allowed by default for `contenttrust` to avoid a regression.

## Other recorded changes
- 7 (value_changed 4, defect_corrected 2, added 1)

[Full analysis](https://ratatosk.io/en/releases/harbor/v2.14.6)

[Original release notes](https://github.com/goharbor/harbor/releases/tag/v2.14.6)