VDB
GO-2025-3553
GO-2025-3553
PUBLISHED
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | promxy-fips | 0, 0, 0 |
| chainguard | crossplane-provider-azure-authorization | 0, 0, 0 |
| github.com | golang-jwt/jwt/v4 | 0, 0, 0 |
| chainguard | kubernetes-1.28 | 0, 0, 0 |
| chainguard | grafana-alloy | 0, 0, 0 |
| chainguard | cluster-autoscaler-1.32 | 0, 0, 0 |
| wolfi | splunk-otel-collector | 0, 0, 0 |
| wolfi | crossplane-provider-azure-managedidentity | 0, 0, 0 |
| chainguard | rekor-fips | 0, 0, 0 |
| chainguard | cilium-fips-1.15 | 0, 0, 0 |
| chainguard | guac | 0, 0, 0 |
| wolfi | scorecard | 0, 0, 0 |
| wolfi | octo-sts | 0, 0, 0 |
| chainguard | flux-notification-controller | 0, 0, 0 |
| chainguard | rancher-2.10 | 0, 0, 0 |
| chainguard | thanos-fips | 0, 0, 0 |
| wolfi | pulumi-kubernetes-operator | 0, 0, 0 |
| chainguard | etcd-fips-3.4 | 0, 0, 0 |
| chainguard | cloud-provider-azure-1.29 | 0, 0, 0 |
| wolfi | flux-notification-controller | 0, 0, 0 |
…and 423 more
Timeline
- Mar 26, 2025 CVE Published
- Aug 8, 2026 CVE Updated