StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
621
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 621 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2453
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
free5gc-nrffree5gc-nrfVerified publisher0.1.31 of 1See more

free5gc-nrf free5gc-nrf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/nrf:v3.4.399e46b860efb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

919
free5gc-nssffree5gc-nssfVerified publisher0.1.31 of 1See more

free5gc-nssf free5gc-nssf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/nssf:v3.4.3dfe8c68c04b4
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

910
free5gc-pcffree5gc-pcfVerified publisher0.1.31 of 1See more

free5gc-pcf free5gc-pcf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/pcf:v3.4.3f712e8ecd927
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

903
free5gc-smffree5gc-smfVerified publisher0.1.31 of 1See more

free5gc-smf free5gc-smf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/smf:v3.4.360e38baa4b10
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

918
free5gc-udmfree5gc-udmVerified publisher0.1.31 of 1See more

free5gc-udm free5gc-udm 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/udm:v3.4.32f68df062a50
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

910
free5gc-udrfree5gc-udrVerified publisher0.1.31 of 1See more

free5gc-udr free5gc-udr 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/udr:v3.4.3c0783bcdcbdc
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

919
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
github.com/golang-jwt/jwt@v3.2.1+incompatible
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
5.2.2

Open the chart page →

1,249
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

794
galoygaloymoney0.34.74 of 24See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
oryd/hydra:v2.2.02c93beb5e5f2
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

8,677
galoy-depsgaloymoney0.10.202 of 9See more

galoy-deps galoymoney 0.10.20

2 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

11,961
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

2,155
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,295
galoygaloymoney20.34.74 of 24See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
oryd/hydra:v2.2.02c93beb5e5f2
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

8,677
galoy-depsgaloymoney20.10.202 of 9See more

galoy-deps galoymoney2 0.10.20

2 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

11,961
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

2,155
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,295
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

895
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,607
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2

Open the chart page →

12,056
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubernetesui/dashboard-auth:1.1.307135c09e9ff
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

6,036
opentelemetry-demogpg-dev0.33.83 of 27See more

opentelemetry-demo gpg-dev 0.33.8

3 of the 27 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

49,025
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

17,759
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,590
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.3
no fix listed
4.5.2

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.04 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

4 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/grafana:11.1.0079600c9517b
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
grafana/loki:2.6.11ee60f980950
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/loki:2.8.2b1da1d23037e
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.02 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

2 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

9,460
cortex-gatewayhelm-charts-nr0.1.91 of 1See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

2,234
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

2,969
listmonkhelm-charts-nr0.1.121 of 1See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
listmonk/listmonk:v2.1.0d2eac77ddfad
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,537
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

25,017
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.2.0
no fix listed
5.2.2

Open the chart page →

6,015
cert-managerhomeenterpriseinc1.10.12 of 3See more

cert-manager homeenterpriseinc 1.10.1

2 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

4,720
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

11,186
vcbackendi4trustVerified publisher0.0.81 of 1See more

vcbackend i4trust 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
wistefan/vcbackend:0.0.13bd436164b51
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,848
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

37,671
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,384
kore-boardimprowisedVerified publisher0.5.82 of 4See more

kore-board improwised 0.5.8

2 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

16,212
chronografinfluxdata1.2.61 of 1See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/chronograf:1.9.496d8a3f65a4f
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

2,198
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,868
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

10,494
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,645
evi-miniointelVerified publisher3.0.32 of 2See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

7,459
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

4,478
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2

Open the chart page →

11,069
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

4,478
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

2,006
identity-managerinvisiblVerified publisher1.0.01 of 1See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
invisibl/identity-manager:1.0.01029f4fe20eb
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,162
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,836
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,143

Container images carrying it

621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/golang-jwt/jwt/v5@v5.1.0
5.2.2
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/golang-jwt/jwt@v3.2.1+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
ghcr.io/usememos/memos:0.24.04723d86e6797
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
5.2.2
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.