VDB
GO-2024-3250
GO-2024-3250
PUBLISHED
Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | octo-sts | 0, 0, 0 |
| chainguard | harbor-2.12 | 0, 0, 0 |
| chainguard | crossplane | 0, 0, 0 |
| wolfi | buildkitd | 0, 0, 0 |
| wolfi | kubernetes-1.27 | 0 |
| chainguard | opentelemetry-collector-contrib | 0, 0, 0 |
| chainguard | buildkitd | 0, 0, 0 |
| chainguard | goreleaser | 0, 0, 0 |
| wolfi | goreleaser | 0, 0, 0 |
| wolfi | azcopy | 0, 0, 0 |
| chainguard | azuredisk-csi-fips-1.31 | 0, 0, 0 |
| chainguard | argo-events-fips | 0, 0, 0 |
| chainguard | zarf | 0, 0, 0 |
| wolfi | flux-source-controller | 0, 0, 0 |
| chainguard | eks-distro-fips-1.29 | 0, 0, 0 |
| chainguard | vexctl | 0, 0, 0 |
| chainguard | cosign | 0, 0, 0 |
| chainguard | temporal-fips | 0, 0, 0 |
| chainguard | crossplane-provider-azure-storage | 0, 0, 0 |
| chainguard | scorecard | 0, 0, 0 |
…and 206 more
Timeline
- Nov 12, 2024 CVE Published
- Feb 4, 2026 CVE Updated