StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
621
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 621 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2453
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
docker-registry-uislamdev0.0.11 of 1See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quiq/docker-registry-ui:0.9.491281da47036
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,200
smallest-self-hostsmallest-self-hostVerified publisher0.2.22 of 12See more

smallest-self-host smallest-self-host 0.2.2

2 of the 12 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

7,685
artifact-hubsoftonic1.19.03 of 8See more

artifact-hub softonic 1.19.0

3 of the 8 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
artifacthub/scanner:v1.19.0323d026e78c3
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
artifacthub/tracker:v1.19.06596c8c4d955
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2

Open the chart page →

2,022
gethstakewise2.5.81 of 3See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ethereum/client-go:v1.15.101f36ca5922a5
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

1,142
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2

Open the chart page →

1,469
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,165
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

4,460
wharf-ainowharf-helmVerified publisher0.1.51 of 7See more

wharf-aino wharf-helm 0.1.5

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2

Open the chart page →

13,459
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

10,090
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

10,323
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,828
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

1,716
airbyteairbyte-v2Verified publisher2.2.02 of 10See more

airbyte airbyte-v2 2.2.0

2 of the 10 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
temporalio/auto-setup:1.27.2b44cbfeb43db
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2

Open the chart page →

12,473
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

13,613
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

4,777
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

6,397
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

11,285
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

5,489
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

4,497
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2

Open the chart page →

28,131
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
library/influxdb:2.6.1-alpine44a366dd7724
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
prom/prometheus:v2.37.98176adea328e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

25,669
app-mobilityappmo0.1.01 of 5See more

app-mobility appmo 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

12,521
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
github.com/golang-jwt/jwt/v4@v4.2.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2

Open the chart page →

2,220
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

2,872
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,945
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

1,945
kubedb-oneappscodeVerified publisher2023.12.287 of 10See more

kubedb-one appscode 2023.12.28

7 of the 10 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

15,200
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,527
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,705
kubedb-provider-gcpappscodeVerified publisher2026.7.101 of 2See more

kubedb-provider-gcp appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

3,033
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,796
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,716
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

2,743
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,569
platform-linksappscodeVerified publisher2026.9.111 of 1See more

platform-links appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

771
stash-communityappscodeVerified publisher0.42.01 of 4See more

stash-community appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash:v0.42.03a98245a7667
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

3,661
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

7,300
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

4,923
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

40,238
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

23,353
cluster-autoscalerarzu9.19.11 of 1See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
breton/cool:dev41b1bb483aa2
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

1,773
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2

Open the chart page →

8,608
assemblylineassemblylineVerified publisher7.4.172 of 12See more

assemblyline assemblyline 7.4.17

2 of the 12 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-01-11T05-49-32Z026ae522febc
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

12,898
performanceandusagediagnosisassist-iot-pud1.0.02 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.2
no fix listed
4.5.2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

8,556
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

32,501
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,980
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,980

Container images carrying it

621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
gitea/gitea:1.22.376f516a1a8c2
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
gitea/gitea:1.21.6ac73e0da341f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
goalert/goalert:v0.32.008d57388b0cb
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.2.0
no fix listed
4.5.2
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
goharbor/harbor-core:v2.9.06412d679fdc3
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
1
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/golang-jwt/jwt/v4@v4.1.0
4.5.2
1
goharbor/harbor-registryctl:v2.9.0cce272836449
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
gradiant/open5gs-dbctl:0.10.3332031245fce
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
grafana/agent:v0.44.23364714a2f64
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/agent:v0.40.3f6cbec9409be
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
grafana/alloy:v1.5.101a63f4e032c
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/alloy:v1.4.306bdcbb51fc2
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/alloy:v1.1.1c3dac4e26471
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
1
grafana/grafana:10.1.50679e877ba20
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
grafana/grafana:9.4.71a359d92f40e
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
grafana/grafana:9.5.239c849cebccc
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
grafana/grafana:11.2.2-security-01464eac539793
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/grafana:11.5.15781759b3d27
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/grafana:11.6.062d2b9d20a19
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/grafana:10.2.36b5b37eb35bb
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
grafana/grafana:9.4.376dcf36e7d2a
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
grafana/grafana:10.3.38640e5038e83
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
grafana/grafana:11.5.28b37a2f028f1
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/grafana:9.1.19746858c20e6
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.2
no fix listed
4.5.2
1
grafana/grafana:9.0.1a738d0744784
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
grafana/grafana:11.1.3b23b588cf7cb
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/grafana:8.3.5cd7cb4345aa7
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
grafana/grafana:8.3.4cf81d2c753c8
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/golang-jwt/jwt@v3.2.1+incompatible
github.com/golang-jwt/jwt/v4@v4.2.0
no fix listed
4.5.2
1
grafana/grafana:10.4.0f9811e4e687f
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
1
grafana/grafana:11.3.1fa801ab6e1ae
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/loki:2.9.1035b02acc6765
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/loki:2.9.26074e01dbe03
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
grafana/loki:2.9.66ca6e2cd3b6f
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
grafana/loki:3.0.0757b5fadf816
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
1
grafana/loki:3.2.0882e30c20683
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/loki:3.3.28af2de1abbdd
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
grafana/loki:2.8.2b1da1d23037e
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
grafana/loki:2.4.2b3af8ead67d7
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
grafana/loki-canary:3.0.028d7c00588aa
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1
grafana/loki-canary:3.1.039baf6d67f85
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.