StackRadar

CVE-2025-30204

High

Advisory

Published 21 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
580
of 17,781 indexed, latest versions
Container images
621
deployed by those charts
Fix available
2 of 3
affected packages

jwt-go allows excessive memory allocation during header parsing

Carried by container images the latest versions of 580 of 17,781 indexed charts deploy, on 621 images.

Affected packageAffected versionsFixed inImages
github.com/golang-jwt/jwt/v4golangv4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more4.5.2453
github.com/golang-jwt/jwt/v5golangv5.0.0, v5.1.0, v5.2.0, v5.2.15.2.2184
github.com/golang-jwt/jwtgolangv3.2.1+incompatible, v3.2.2+incompatibleno fix listed127
OSV records
GHSA-mh63-6h87-95cp
Also known as
GO-2025-3553

Charts affected

580 by stars
ChartLatestAffected imagesRadar Score
flame-rollupastria0.1.31 of 2See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,680
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

5,074
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

6,908
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2

Open the chart page →

4,568
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

1,191
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

5,823
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,312
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2

Open the chart page →

13,459
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.02 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
grafana/pyroscope:1.10.0319bf32ae06b
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2

Open the chart page →

1,859
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

1,400
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,770
etcdcagriekinVerified publisher0.1.51 of 1See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.16d967d98a12dc
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

892
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,195
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

14,130
cert-managercanine1.15.31 of 4See more

cert-manager canine 1.15.3

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

2,880
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

3,449
temporalcastaiVerified publisher0.54.26 of 14See more

temporal castai 0.54.2

6 of the 14 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2
temporalio/server:1.26.21e2626efcbc1
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2
temporalio/ui:2.33.05c586a3c8ec5
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.304 of 18See more

catalyst-agents catalyst-agents 0.1.30

4 of the 18 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
grafana/loki:3.0.0757b5fadf816
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
grafana/loki-canary:3.0.028d7c00588aa
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
grafana/tempo:2.5.0f0200a9bff6d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2

Open the chart page →

15,027
clechaosnative0.2.73 of 6See more

cle chaosnative 0.2.7

3 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed
chaosnative/cle-license-module:2.7.062cf6adc355e
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/golang-jwt/jwt@v3.2.1+incompatible
no fix listed

Open the chart page →

16,389
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2

Open the chart page →

4,810
capi-kamaji-vsphere-fullclastixVerified publisher1.0.12 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

2 of the 9 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

5,933
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

7,104
kamajiclastixVerified publisher0.0.0+latest1 of 4See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

11,995
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.0.0
no fix listed
4.5.2

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

18,293
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

3,136
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

16,069
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

1,035
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/docker:27-dindaa3df78ecf32
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

19,338
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

3,181
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2

Open the chart page →

9,146
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.3
no fix listed
4.5.2

Open the chart page →

4,644
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2

Open the chart page →

1,925
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

3,672
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed

Open the chart page →

2,253
csghubcsghubVerified publisher2.4.33 of 34See more

csghub csghub 2.4.3

3 of the 34 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2

Open the chart page →

58,897
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

16,604
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2

Open the chart page →

2,629
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

1,926
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2

Open the chart page →

4,509
cortex-gatewaydeliveryheroVerified publisher0.1.91 of 1See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2

Open the chart page →

2,234
kubeteach-coredergeberl0.2.31 of 1See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-30204.

Container imageDigestPackageFixed in
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2

Open the chart page →

1,504

Container images carrying it

621 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/kratos:v1.1.08f15006a080d
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.0.0
4.5.2
5.2.2
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.1
no fix listed
4.5.2
5.2.2
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.2.0
no fix listed
4.5.2
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
owncloud/ocis:7.1.388e7c854517d
github.com/golang-jwt/jwt/v4@v4.5.1
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
owncloud/server:10.15.051d9b74fc2a8
github.com/golang-jwt/jwt/v5@v5.2.1
5.2.2
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.1
no fix listed
4.5.2
1
phntom/external-dns-host-network:0.0.123adadbac8443
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
1
phntom/oauth2-proxy:v7.3.48ea656a2a895
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
prom/prometheus:v2.51.24f6c47e39a90
github.com/golang-jwt/jwt/v5@v5.2.0
5.2.2
1
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/golang-jwt/jwt/v5@v5.0.0
5.2.2
1
quiq/docker-registry-ui:0.9.491281da47036
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
rancher/kubectl:v1.25.085a0d1148784
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
rancher/mirrored-cloud-provider-vsphere:v1.31.1febfd0517838
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
rclone/rclone:1.63.008e1af3c8814
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
samarthya/spinnaker:v1.0ef06d81036af
github.com/golang-jwt/jwt@v3.2.2+incompatible
no fix listed
1
sarwansharma/minio:v359d1da9385d1
github.com/golang-jwt/jwt/v4@v4.4.1
4.5.2
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
github.com/golang-jwt/jwt/v4@v4.2.0
4.5.2
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/golang-jwt/jwt/v4@v4.5.1
4.5.2
1
semitechnologies/weaviate:1.19.17a00d226f063
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
sikalabs/slu:v0.72.07bd267f30247
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/golang-jwt/jwt/v4@v4.5.0
github.com/golang-jwt/jwt/v5@v5.2.0
4.5.2
5.2.2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/golang-jwt/jwt/v4@v4.0.0
4.5.2
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/golang-jwt/jwt/v4@v4.3.0
4.5.2
1
summerwind/actions-runner-controller:v0.27.62128f81dbede
github.com/golang-jwt/jwt/v4@v4.5.0
4.5.2
1
supabase/gotrue:v2.91.07174d551d720
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.4.3
no fix listed
4.5.2
1
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/golang-jwt/jwt/v4@v4.4.3
github.com/golang-jwt/jwt/v5@v5.2.1
4.5.2
5.2.2
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/golang-jwt/jwt/v4@v4.4.3
4.5.2
1
tailwarden/komiser:3.1.103f68c8ae7993
github.com/golang-jwt/jwt/v4@v4.4.2
4.5.2
1
temporalio/admin-tools:1.22.4258958fe2ff2
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.0
no fix listed
4.5.2
1
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/golang-jwt/jwt@v3.2.2+incompatible
github.com/golang-jwt/jwt/v4@v4.5.1
no fix listed
4.5.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.