CVE-2025-30204
HighAdvisory
Published 21 Mar 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 52nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 581
- of 17,787 indexed, latest versions
- Container images
- 622
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
jwt-go allows excessive memory allocation during header parsing
Carried by container images the latest versions of 581 of 17,787 indexed charts deploy, on 622 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v4.0.0, v4.1.0, v4.2.0, v4.3.0+5 more | 4.5.2 | 453 |
| github.com/ | v5.0.0, v5.1.0, v5.2.0, v5.2.1 | 5.2.2 | 184 |
| github.com/ | v3.2.1+incompatible, v3.2.2+incompatible | no fix listed | 128 |
- OSV records
- GHSA-mh63-6h87-95cp
- Also known as
- GO-2025-3553
Charts affected
581 by stars
Container images carrying it
622 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| temporalio/ | 258958fe2ff2 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | 37e2e33dbd7b | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | 836af062af30 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | cda4901bab53 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | b44cbfeb43db | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | 1e2626efcbc1 | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | 8a5798191dea | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | ddeebf8bad8f | github.com/ github.com/ | no fix listed 4.5.2 | 1 |
| temporalio/ | e26758f5a1bf | github.com/ | 4.5.2 | 1 |
| temporalio/ | 5c2a3645d09c | github.com/ | no fix listed | 1 |
| temporalio/ | 5c586a3c8ec5 | github.com/ | no fix listed | 1 |
| testinprod/ | 0a125bd77a2d | github.com/ | 4.5.2 | 1 |
| thesisrobot/ | 287129953689 | github.com/ | 4.5.2 | 1 |
| thmmniii/ | 86105349c1a3 | github.com/ | 4.5.2 | 1 |
| tobirachel/ | 7d9f37154994 | github.com/ | 4.5.2 | 1 |
| treeverse/ | 478f37a6cffc | github.com/ | no fix listed | 1 |
| tundeficky/ | 3cf9a9ce54e8 | github.com/ | 4.5.2 | 1 |
| twentycrm/ | 2f78405a78be | github.com/ | no fix listed | 1 |
| wallarm/ | a321bc974a19 | github.com/ | 5.2.2 | 1 |
| wallarm/ | 097cadc42336 | github.com/ | no fix listed | 1 |
| wateim/ | 2520149ee574 | github.com/ | no fix listed | 1 |
| webdevops/ | 2446baee7b69 | github.com/ | 5.2.2 | 1 |
| webdevops/ | f333704ecd60 | github.com/ | 5.2.2 | 1 |
| webdevops/ | 381136dda026 | github.com/ | 5.2.2 | 1 |
| wistefan/ | 3bd436164b51 | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 53d9aa4d2c7a | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 75cfdcfa050a | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 98a2cc7fd62e | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 02b90651367f | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| gcr.io/ | 852f7923fad3 | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 9e507ac0aebb | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| gcr.io/ | b88f88070fb0 | github.com/ | no fix listed | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | 4.5.2 | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 62c44a384e13 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 18689773150d | github.com/ | no fix listed | 1 |
| ghcr.io/ | 744bc929a579 | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 81f6007abb4e | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | b1857871e06c | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 3490d9900af1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c8af1c5aae40 | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 752f1aa02438 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 1aba0ffe55ea | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ github.com/ | 4.5.2 5.2.2 | 1 |
| ghcr.io/ | e2b8aa62b648 | github.com/ | 5.2.2 | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | 8bc853c7414c | github.com/ | 4.5.2 | 1 |
| ghcr.io/ | e37d61b5277c | github.com/ | 4.5.2 | 1 |