CVE-2025-30204
HighAdvisory
Published 21 Mar 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 52nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 579
- of 17,787 indexed, latest versions
- Container images
- 620
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
jwt-go allows excessive memory allocation during header parsing
Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 620 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more | 4.5.2 | 452 |
| github.com/ | v5.0.0, v5.1.0, v5.2.0, v5.2.1 | 5.2.2 | 184 |
| github.com/ | v3.2.1+incompatible, v3.2.2+incompatible | no fix listed | 127 |
- OSV records
- GHSA-mh63-6h87-95cp
- Also known as
- GO-2025-3553
Charts affected
579 by stars
Container images carrying it
620 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oryd/ | 8f15006a080d | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| otel/ | 9e36620d6c2c | github.com/ | 5.2.2 | 1 |
| otel/ | ee9da0b08d83 | github.com/ | 4.5.2 | 1 |
| otel/ | 37fa87091cfa | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| otel/ | 71fcef33ae71 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| otel/ | 923eb1cfae32 | github.com/ github.com/ github.com/ | no fix listed 4.5.2 5.2.2 | 1 |
| otel/ | 995f17004231 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| otel/ | ba173aa85f3f | github.com/ | 4.5.2 | 1 |
| otel/ | c6671841470b | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| otel/ | 1e45d9483faa | github.com/ | 5.2.2 | 1 |
| owncloud/ | 88e7c854517d | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| owncloud/ | 51d9b74fc2a8 | github.com/ | 5.2.2 | 1 |
| phntom/ | 53883b65d9b7 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| phntom/ | 9242b4df9e65 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| phntom/ | 3adadbac8443 | github.com/ | 4.5.2 | 1 |
| phntom/ | 51cf9da4aa2e | github.com/ | 5.2.2 | 1 |
| phntom/ | 8ea656a2a895 | github.com/ | no fix listed | 1 |
| portainer/ | 3e61aaee1341 | github.com/ | 4.5.2 | 1 |
| prom/ | 4f6c47e39a90 | github.com/ | 5.2.2 | 1 |
| prom/ | b440bc0e8aa5 | github.com/ | 5.2.2 | 1 |
| quiq/ | 91281da47036 | github.com/ | no fix listed | 1 |
| rancher/ | 8c2599ecfca8 | github.com/ | 4.5.2 | 1 |
| rancher/ | 85a0d1148784 | github.com/ | 4.5.2 | 1 |
| rancher/ | febfd0517838 | github.com/ | 4.5.2 | 1 |
| rclone/ | 08e1af3c8814 | github.com/ | 4.5.2 | 1 |
| rss3/ | e8adc09d9c07 | github.com/ | 4.5.2 | 1 |
| rss3/ | 45b91380bbe7 | github.com/ | 4.5.2 | 1 |
| rss3/ | 96672897ba9e | github.com/ | 4.5.2 | 1 |
| samarthya/ | ef06d81036af | github.com/ | no fix listed | 1 |
| sarwansharma/ | 59d1da9385d1 | github.com/ | 4.5.2 | 1 |
| sealio/ | b0389d9848a5 | github.com/ | 4.5.2 | 1 |
| semaphoreui/ | 3996804607eb | github.com/ | 4.5.2 | 1 |
| semaphoreui/ | 98ad9bc7a2a0 | github.com/ | 4.5.2 | 1 |
| semaphoreui/ | e9260bfa8255 | github.com/ | 4.5.2 | 1 |
| semitechnologies/ | 7a00d226f063 | github.com/ | 4.5.2 | 1 |
| sigma2as/ | c284ead9ec3e | github.com/ | 4.5.2 | 1 |
| sikalabs/ | 7bd267f30247 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| simpleidserver/ | 25e378d57d78 | github.com/ | 4.5.2 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| someblackmagic/ | 6eca64b6b440 | github.com/ | 4.5.2 | 1 |
| streamnative/ | 31533fa9fab7 | github.com/ | 4.5.2 | 1 |
| summerwind/ | 2128f81dbede | github.com/ | 4.5.2 | 1 |
| supabase/ | 7174d551d720 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| supabase/ | ba4ddc594b0b | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| svtechnmaa/ | 1d71314424aa | github.com/ | 4.5.2 | 1 |
| tailwarden/ | 3f68c8ae7993 | github.com/ | 4.5.2 | 1 |
| temporalio/ | 258958fe2ff2 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | 37e2e33dbd7b | github.com/ github.com/ | no fix listed 4.5.2 | 1 |