StackRadar

CVE-2020-26160

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
163
deployed by those charts
Fix available
None
affected package

Authorization bypass in github.com/dgrijalva/jwt-go

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 163 images.

Affected packageAffected versionsFixed inImages
github.com/dgrijalva/jwt-gogolangv0.0.0-20160705203006-01aeca54ebda, v3.0.1-0.20170104182250-a601269ab70c+incompatible, v3.2.0+incompatible, v3.2.1-0.20190620180102-5e25c22bd5d6+incompatible+1 moreno fix listed163
OSV records
GHSA-w73w-5m7g-f7qcGO-2020-0017
Also known as
SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,821
sloopchristianhuthVerified publisher0.4.01 of 1See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,290
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/dgrijalva/jwt-go@v0.0.0-20160705203006-01aeca54ebda
no fix listed

Open the chart page →

3,595
openbankingcloudentity0.1.95 of 6See more

openbanking cloudentity 0.1.9

5 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed

Open the chart page →

18,040
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,695
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

12,907
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,181
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,253
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,275
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,624
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,977
datadog-operatordatadog-test0.1.21 of 1See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
datadog/operator:0.3.117f08a860090
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,980
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,486
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,856
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

68,240
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

11,909
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

11,909
hammonddjjudas21Verified publisher0.3.91 of 1See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,806
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
duplicacyduplicacy0.1.21 of 2See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
drumsergio/duplicacy-container:0.1.0dd3ee9703969
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,412
ai-scale-authdysnixVerified publisher0.1.11 of 3See more

ai-scale-auth dysnix 0.1.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,141
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,255
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,484
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,673
hammondgabe565Verified publisher0.6.41 of 1See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,806
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,236
vikunjageek-cookbookVerified publisher6.2.01 of 4See more

vikunja geek-cookbook 6.2.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
vikunja/api:0.17.18cba0520bf8c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,893
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

17,759
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,312
harborhelm-harborVerified publisher2.3.52 of 8See more

harbor helm-harbor 2.3.5

2 of the 8 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,650
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,544
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,045
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,812
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,149
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

855
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

624

Container images carrying it

163 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
etejeda/butlerci:0.1.0737d58183abc
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
filebrowser/filebrowser:v2.18.04fcd47af573c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
flashcatcloud/nightingale:8.5.1421acb36181b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
gitea/gitea:1.12.485416d6f65fe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
gitea/gitea:1.13.0d5ab14cd29af
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
grafana/loki:2.0.077e138f81a8e
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
grafana/promtail:2.0.05fd12edcc694
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
iotaledger/goshimmer:v0.8.6b02a8f77474f
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
keptncontrib/prometheus-service:0.6.029969dd547de
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
library/influxdb:2.0.8ba10ac9ba17a
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
library/traefik:2.2.8f5af5a5ce17f
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
mattermost/mattermost-app-chaosengine:c153e436268954edd67
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
mesosphere/kubefed:proxyurl4fd8889195fe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
minio/operator:v4.1.02adc5be088f5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
github.com/dgrijalva/jwt-go@v3.0.1-0.20170104182250-a601269ab70c+incompatible
no fix listed
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
monitoror/monitoror:44b88edcf51ff
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
nerzhul/mc-arm64:2020.10.034215df511f31
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
prom/prometheus:v2.18.15880ec936055
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
prom/prometheus:v2.19.2cd134bd4fca0
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/dgrijalva/jwt-go@v0.0.0-20160705203006-01aeca54ebda
no fix listed
1
rancher/hardened-calico:v3.13.36d2cd61a338b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
reportportal/service-index:5.0.112b27a2d7a87d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
rookout/k8s-operator:latest0d083f3ef1a7
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
stakkato95/twitter-service-users:0.1.1456049efee9a
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.