StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
621
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 621 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2453
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

4,517
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

1,360
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

969
openebsopenebsOfficialVerified publisher4.6.13 of 35See more

openebs openebs 4.6.1

3 of the 35 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

23,894
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,883
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

2,483
opencostopencostOfficialVerified publisher2.5.311 of 2See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

265
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

1,367
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

2,103
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,891
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

3,475
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

32,259
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

2,221
keelkeel1.2.21 of 1See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

809
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,119
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
rancher/kubectl:v1.25.085a0d1148784
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

9,864
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

1,097
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

1,979
oncallgrafana1.16.54 of 12See more

oncall grafana 1.16.5

4 of the 12 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

16,251
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

1,556
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

2,993
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

8,390
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

4,405
glasskube-operatorglasskubeOfficialVerified publisher0.12.22 of 3See more

glasskube-operator glasskube 0.12.2

2 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

11,933
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

1,346
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

10,670
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

1,235
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/loki:2.6.11ee60f980950
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

6,470
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/golang-jwt/jwt/v4@v4.4.3
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

23,123
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2

Open the chart page →

2,107
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

1,247
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

4,167
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
quay.io/devtron/kubectl:latest2ad610626658
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
gitea/gitea:1.22.376f516a1a8c2
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

23,228
temporallemontechVerified publisher0.37.02 of 13See more

temporal lemontech 0.37.0

2 of the 13 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

14,893
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
openmined/syft-seaweedfs:0.9.53a4144c0bb82
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2

Open the chart page →

17,245
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

6,849
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

4,531
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

265
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

14,240
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

3,073
aad-pod-identityaad-pod-identity4.1.182 of 2See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,858
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

17,263
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

27,267
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

5,674
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

8,835
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

96,941
vclustermainVerified publisher0.17.03 of 10See more

vcluster main 0.17.0

3 of the 10 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

11,552
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

7,949

Container images carrying it

621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.2.0
no fix listed
5.2.2
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2
1
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/layr-labs/eigenda/opr-node:0.8.46650119a385f
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/layr-labs/eigenda/opr-nodeplugin:0.8.4e459ad3ae758
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.