CVE-2025-30204
HighAdvisory
Published 21 Mar 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 52nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 589
- of 17,787 indexed, latest versions
- Container images
- 628
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
jwt-go allows excessive memory allocation during header parsing
Carried by container images the latest versions of 589 of 17,787 indexed charts deploy, on 628 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more | 4.5.2 | 458 |
| github.com/ | v5.0.0, v5.1.0, v5.2.0, v5.2.1 | 5.2.2 | 184 |
| github.com/ | v3.2.1+incompatible, v3.2.2+incompatible | no fix listed | 131 |
- OSV records
- GHSA-mh63-6h87-95cp
- Also known as
- GO-2025-3553
Charts affected
589 by stars
Container images carrying it
628 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 9ab9a675c405 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 8bc853c7414c | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | e37d61b5277c | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | ee1eb3c9c9a1 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 8186d6dd81f4 | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 1041d4449e49 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 24c76f294a80 | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | d3de52dfb0b4 | github.com/ | no fix listed | 1 |
| ghcr.io/ | bbef381294ed | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 7104f60d8972 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 274a179fd402 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 00cd9316a379 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 03c1ddbda33b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 24a0113d5fb0 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c8ac95a30c31 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 71d1f1c0179e | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| ghcr.io/ | 878ef6a31fa0 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| ghcr.io/ | c298183a5208 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| ghcr.io/ | c81f105c3682 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 6d4106724d56 | github.com/ github.com/ | no fix listed 5.2.2 | 1 |
| ghcr.io/ | 97febecbe6cb | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 94c9a3e799c2 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | bd109b2bda38 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 02348a19aeae | github.com/ github.com/ github.com/ | no fix listed 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 73a2ebae4413 | github.com/ github.com/ github.com/ | no fix listed 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 315e188a07c2 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | b40439329191 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 6de40f528be9 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 455f6e7a26fd | github.com/ | no fix listed | 1 |
| ghcr.io/ | f52e66eff50b | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | df6b11907d33 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 7bfe1c07bd9b | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | ec36422b09af | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 42574f512837 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 9518de37eed5 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | e24894e32cbc | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 49b1c312e342 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | aa0c8526ae5e | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | a1d4cf8b8fe1 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | e3d1f1302e49 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | ac8459f70f85 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | af77073c184f | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 669e27a5d1af | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | c6fe64c7bfcd | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 313edfec2fca | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | 9c73f1841ebc | github.com/ | 4.5.2 | 1 |