StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
579
of 17,787 indexed, latest versions
Container images
620
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 620 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2452
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

579 by stars
ChartLatestAffected imagesRadar Score
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,968
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

16,600
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

10,546
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,893
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

14,801
gpu-provisionerkaitoVerified publisher0.2.01 of 1See more

gpu-provisioner kaito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2

Open the chart page →

1,038
kiaekiae0.1.64 of 9See more

kiae kiae 0.1.6

4 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/promtail:2.6.1072527b12cdf
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
istio/pilot:1.15.2db08d6963975
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.2.0
no fix listed
4.5.2

Open the chart page →

19,168
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

12,062
knative-servingknative-servingVerified publisher1.18.31 of 7See more

knative-serving knative-serving 1.18.3

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

3,728
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,265
komoplanekomodorVerified publisher0.1.81 of 1See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
komodorio/komoplane:0.2.19678d02c3f2e
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

953
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

920
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

70,530
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

3,649
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

3,812
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2

Open the chart page →

2,267
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
kubebb/cert-manager-controller:v1.8.020509de4b399
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

8,160
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.3.0
no fix listed
4.5.2

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.3.0
no fix listed
4.5.2

Open the chart page →

1,938
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

7,459
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

6,490
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

1,869
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,871
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2

Open the chart page →

2,299
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

13,497
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,561
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/loki:2.9.26074e01dbe03
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

5,841
openebskubeblocksVerified publisher3.10.01 of 3See more

openebs kubeblocks 3.10.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
openebs/node-disk-operator:2.1.06afe2123c457
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

10,489
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

10,302
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

2,742
kubeclaritykubeclarity2.23.31 of 5See more

kubeclarity kubeclarity 2.23.3

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

5,496
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

1,615
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

1,663
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/golang-jwt/jwt@v3.2.1+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2

Open the chart page →

1,554
harborkubesphereVerified publisher1.9.34 of 11See more

harbor kubesphere 1.9.3

4 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.2.0
no fix listed
4.5.2
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.11 of 3See more

chaos-mesh kubesphere-stable 2.5.1

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

8,555
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

18,316
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.0.0
no fix listed
5.2.2

Open the chart page →

1,308
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

6,824
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

9,092
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

4,271
minioleprechaun-charts0.1.61 of 1See more

minio leprechaun-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,312
lightsteplightstep-microsat2.0.211 of 1See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lightstep/microsatellite:2024-01-22_17-52-59Zc800e05e1eff
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

1,116
linkerd-preview-vizlinkerd-buoyantVerified publisher25.4.31 of 5See more

linkerd-preview-viz linkerd-buoyant 25.4.3

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

3,420
linkerd-dashboardlinkerd-dashboardOfficial0.11.11 of 2See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

1,037
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

2,155
tempo-distributedloafoe1.20.11 of 2See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/tempo:2.6.0f55a8a1937ff
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

2,020
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2

Open the chart page →

7,510
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

3,225

Container images carrying it

620 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.2.0
no fix listed
5.2.2
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/k10app/businit:latest94c9a3e799c2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2
1
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/layr-labs/eigenda/opr-node:0.8.46650119a385f
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/layr-labs/eigenda/opr-nodeplugin:0.8.4e459ad3ae758
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.