StackRadar

CVE-2020-26160

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
163
deployed by those charts
Fix available
None
affected package

Authorization bypass in github.com/dgrijalva/jwt-go

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 163 images.

Affected packageAffected versionsFixed inImages
github.com/dgrijalva/jwt-gogolangv0.0.0-20160705203006-01aeca54ebda, v3.0.1-0.20170104182250-a601269ab70c+incompatible, v3.2.0+incompatible, v3.2.1-0.20190620180102-5e25c22bd5d6+incompatible+1 moreno fix listed163
OSV records
GHSA-w73w-5m7g-f7qcGO-2020-0017
Also known as
SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,821
sloopchristianhuthVerified publisher0.4.01 of 1See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,290
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/dgrijalva/jwt-go@v0.0.0-20160705203006-01aeca54ebda
no fix listed

Open the chart page →

3,595
openbankingcloudentity0.1.95 of 6See more

openbanking cloudentity 0.1.9

5 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed

Open the chart page →

18,040
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,695
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

12,907
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,181
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,253
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,275
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,624
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,977
datadog-operatordatadog-test0.1.21 of 1See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
datadog/operator:0.3.117f08a860090
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,980
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,486
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,856
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

68,240
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

11,909
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

11,909
hammonddjjudas21Verified publisher0.3.91 of 1See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,806
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,408
duplicacyduplicacy0.1.21 of 2See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
drumsergio/duplicacy-container:0.1.0dd3ee9703969
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,412
ai-scale-authdysnixVerified publisher0.1.11 of 3See more

ai-scale-auth dysnix 0.1.1

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,141
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,255
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
prom/prometheus:v2.19.0bfad037f95e5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

8,484
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,673
hammondgabe565Verified publisher0.6.41 of 1See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,806
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,236
vikunjageek-cookbookVerified publisher6.2.01 of 4See more

vikunja geek-cookbook 6.2.0

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
vikunja/api:0.17.18cba0520bf8c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

6,893
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

17,759
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

14,312
harborhelm-harborVerified publisher2.3.52 of 8See more

harbor helm-harbor 2.3.5

2 of the 8 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

1,650
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,544
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,045
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

7,510
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

3,812
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

4,149
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

855
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2020-26160.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed

Open the chart page →

624

Container images carrying it

163 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
6
prom/prometheus:v2.13.10a8caa2e9f19
github.com/dgrijalva/jwt-go@v0.0.0-20160705203006-01aeca54ebda
no fix listed
5
alfhou/hammond:v0.0.24c85dc0293aa1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
argoproj/argocd:v1.8.1830e86cacefd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
dgraph/dgraph:v21.12.03b55ea83fffe
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
prom/prometheus:v2.19.0bfad037f95e5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
3
datawire/aes:1.14.48588eafe6862
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
grafana/loki:1.5.0922b3f412fdd
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
grafana/promtail:1.5.046e88d390cd6
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
prom/prometheus:v2.17.242d2395cd719
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
prom/prometheus:v2.21.0d43417c260e5
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
statping/statping:v0.90.74e874da513a5c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
2
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
alpine/k8s:1.18.16a41efe02a041
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
apache/apisix-dashboard:2.9.0c010ea7d1694
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
chirpstack/chirpstack-network-server:3c0bbbb7a3f1e
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
1
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
1
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
1
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
1
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
github.com/dgrijalva/jwt-go@v3.2.1-0.20200107013213-dc14462fd587+incompatible
no fix listed
1
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/balance-registration-php:devc36094a41369
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/betaalservice-php:latestece1ab544c57
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/cgrc-php:dev25415534d245
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/checkin-component-php:dev3423845692c1
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/conduction-ui-php:dev2744565516e8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/docparser-php:devb6f95c8ead7d
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
conduction/pan-php:dev24f03c57568f
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
containous/maesh:v1.3.2587162516502
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
coredns/coredns:1.7.073ca82b4ce82
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
craftypath/sops-operator:v0.8.0402a0024c732
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
datadog/operator:0.3.117f08a860090
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
datawire/aes:1.13.62beb65062c8b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
devspacecloud/manager:0.3.349c397413f7b
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
github.com/dgrijalva/jwt-go@v3.2.0+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.