StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
621
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 621 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2453
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
free5gc-nrffree5gc-nrfVerified publisher0.1.31 of 1See more

free5gc-nrf free5gc-nrf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/nrf:v3.4.399e46b860efb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

919
free5gc-nssffree5gc-nssfVerified publisher0.1.31 of 1See more

free5gc-nssf free5gc-nssf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/nssf:v3.4.3dfe8c68c04b4
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

910
free5gc-pcffree5gc-pcfVerified publisher0.1.31 of 1See more

free5gc-pcf free5gc-pcf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/pcf:v3.4.3f712e8ecd927
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

903
free5gc-smffree5gc-smfVerified publisher0.1.31 of 1See more

free5gc-smf free5gc-smf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/smf:v3.4.360e38baa4b10
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

918
free5gc-udmfree5gc-udmVerified publisher0.1.31 of 1See more

free5gc-udm free5gc-udm 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/udm:v3.4.32f68df062a50
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

910
free5gc-udrfree5gc-udrVerified publisher0.1.31 of 1See more

free5gc-udr free5gc-udr 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/udr:v3.4.3c0783bcdcbdc
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

919
free5gc-webuifree5gc-webuiVerified publisher0.1.31 of 1See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
free5gc/webui:v3.4.39adeb18492cb
github.com/golang-jwt/jwt@v3.2.1+incompatible
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
5.2.2

Open the chart page →

1,249
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

794
galoygaloymoney0.34.74 of 24See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
oryd/hydra:v2.2.02c93beb5e5f2
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

8,677
galoy-depsgaloymoney0.10.202 of 9See more

galoy-deps galoymoney 0.10.20

2 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

11,961
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

2,155
monitoringgaloymoney0.12.212 of 6See more

monitoring galoymoney 0.12.21

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,295
galoygaloymoney20.34.74 of 24See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
oryd/hydra:v2.2.02c93beb5e5f2
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

8,677
galoy-depsgaloymoney20.10.202 of 9See more

galoy-deps galoymoney2 0.10.20

2 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

11,961
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

2,155
monitoringgaloymoney20.12.212 of 6See more

monitoring galoymoney2 0.12.21

2 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,295
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

895
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,607
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2

Open the chart page →

12,056
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
kubernetesui/dashboard-auth:1.1.307135c09e9ff
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

6,036
opentelemetry-demogpg-dev0.33.83 of 27See more

opentelemetry-demo gpg-dev 0.33.8

3 of the 27 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

49,025
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

17,759
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,590
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.3
no fix listed
4.5.2

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.04 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

4 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/grafana:11.1.0079600c9517b
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
grafana/loki:2.6.11ee60f980950
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
grafana/loki:2.8.2b1da1d23037e
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.02 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

2 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2

Open the chart page →

9,460
cortex-gatewayhelm-charts-nr0.1.91 of 1See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

2,234
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

2,969
listmonkhelm-charts-nr0.1.121 of 1See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
listmonk/listmonk:v2.1.0d2eac77ddfad
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,537
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

25,017
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v5@v5.2.0
no fix listed
5.2.2

Open the chart page →

6,015
cert-managerhomeenterpriseinc1.10.12 of 3See more

cert-manager homeenterpriseinc 1.10.1

2 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

4,720
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

11,186
vcbackendi4trustVerified publisher0.0.81 of 1See more

vcbackend i4trust 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
wistefan/vcbackend:0.0.13bd436164b51
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,848
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

37,671
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,384
kore-boardimprowisedVerified publisher0.5.82 of 4See more

kore-board improwised 0.5.8

2 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

16,212
chronografinfluxdata1.2.61 of 1See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/chronograf:1.9.496d8a3f65a4f
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2

Open the chart page →

2,198
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,868
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

10,494
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,645
evi-miniointelVerified publisher3.0.32 of 2See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

7,459
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

4,478
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2

Open the chart page →

11,069
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

4,478
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

2,006
identity-managerinvisiblVerified publisher1.0.01 of 1See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
invisibl/identity-manager:1.0.01029f4fe20eb
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,162
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,836
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,143

Container images carrying it

621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:11.4.0d8ea37798ccc
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
2
grafana/loki:3.1.0d947e68a84d9
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
2
grafana/loki:2.5.0f9ef133793af
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
library/arangodb:3.11.81e75d74954a4
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
2
library/influxdb:2.6.1-alpine44a366dd7724
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
listmonk/listmonk:v2.1.0d2eac77ddfad
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
2
minio/operator:v4.3.754393e03f3b2
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
2
openebs/node-disk-operator:2.1.06afe2123c457
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
oryd/kratos:v1.0.0d06fc5845f63
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
no fix listed
4.5.2
5.2.2
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
2
prom/prometheus:v2.52.05c435642ca4d
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
2
prom/prometheus:v2.37.98176adea328e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
2
rancher/kine:v0.11.412889bbcd1e8
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
rclone/rclone:1.6874c51b8817e5
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
2
rookout/controller:latest4451a6f6b8ec
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
rookout/data-on-prem:latest51c0fce64467
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
2
temporalio/server:1.22.4c0a44c26397b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
2
temporalio/ui:2.16.2af9c9349708f
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
2
gcr.io/knative-releases/knative.dev/serving/cmd/controller5b93308a392c
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
2
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
2
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
ghcr.io/opencost/opencost:1.121.2de2784434527
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.2
no fix listed
4.5.2
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.