VDB
RHSA-2025%3A18241
RHSA-2025%3A18241
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:9c5ecc5187aef4b760a92ed26541e254b48f1f7aac456fd6e22d36ed5f7163e3_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:9c5ecc5187aef4b760a92ed26541e254b48f1f7aac456fd6e22d36ed5f7163e3_amd64, *, registry.redhat.io/openshift4/cloud-network-config-controller-rhel8@sha256:9c5ecc5187aef4b760a92ed26541e254b48f1f7aac456fd6e22d36ed5f7163e3_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-provisioner@sha256:90c5c064c3286eb543578f63a4bdfe6b9eb45d8b3d988ce07262c91cb54ce6f1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-csi-external-provisioner@sha256:90c5c064c3286eb543578f63a4bdfe6b9eb45d8b3d988ce07262c91cb54ce6f1_amd64, registry.redhat.io/openshift4/ose-csi-external-provisioner@sha256:90c5c064c3286eb543578f63a4bdfe6b9eb45d8b3d988ce07262c91cb54ce6f1_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-rhel8-operator@sha256:802ee595e75bb69a4d3ce85c6064a666e802cfc22bc0fae0cbc71a013480a41e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:6374cb59d30eb2e30359a2e3945f2c822a895e2deb51dcb512acb0b11c1ff342_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:6374cb59d30eb2e30359a2e3945f2c822a895e2deb51dcb512acb0b11c1ff342_amd64, registry.redhat.io/openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:6374cb59d30eb2e30359a2e3945f2c822a895e2deb51dcb512acb0b11c1ff342_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-network-operator@sha256:4311cfd1c3688b7d8d9b78d3fe7e5a0fd88629f1b5c2c4563c75a57469deecf6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-cluster-network-operator@sha256:4311cfd1c3688b7d8d9b78d3fe7e5a0fd88629f1b5c2c4563c75a57469deecf6_amd64, *, registry.redhat.io/openshift4/ose-cluster-network-operator@sha256:4311cfd1c3688b7d8d9b78d3fe7e5a0fd88629f1b5c2c4563c75a57469deecf6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-operator@sha256:40363c17a11d26b6aadb55a3a8eb50c2be9a1246a92373c9c37e8942cf0d59b5_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-prometheus-operator@sha256:40363c17a11d26b6aadb55a3a8eb50c2be9a1246a92373c9c37e8942cf0d59b5_amd64, registry.redhat.io/openshift4/ose-prometheus-operator@sha256:40363c17a11d26b6aadb55a3a8eb50c2be9a1246a92373c9c37e8942cf0d59b5_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-hyperkube@sha256:3808907505bd113d4c3243ea676ab41ae02ee97fab21542a67935d9f0b583ea9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-hyperkube@sha256:3808907505bd113d4c3243ea676ab41ae02ee97fab21542a67935d9f0b583ea9_amd64, registry.redhat.io/openshift4/ose-hyperkube@sha256:3808907505bd113d4c3243ea676ab41ae02ee97fab21542a67935d9f0b583ea9_amd64, registry.redhat.io/openshift4/ose-hyperkube@sha256:3808907505bd113d4c3243ea676ab41ae02ee97fab21542a67935d9f0b583ea9_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-deployer@sha256:fe4f7126f78bfc7214447dd695b687e4cf1b76c4146cfe9b443ec55b90611cde_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-deployer@sha256:fe4f7126f78bfc7214447dd695b687e4cf1b76c4146cfe9b443ec55b90611cde_amd64, *, registry.redhat.io/openshift4/ose-deployer@sha256:fe4f7126f78bfc7214447dd695b687e4cf1b76c4146cfe9b443ec55b90611cde_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-aws-rhel8@sha256:947658c3d6a71f9c022e739f8ba7a33ba47eeb844214a192e8483c5a1f1e79e2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-machine-api-provider-aws-rhel8@sha256:947658c3d6a71f9c022e739f8ba7a33ba47eeb844214a192e8483c5a1f1e79e2_amd64, *, registry.redhat.io/openshift4/ose-machine-api-provider-aws-rhel8@sha256:947658c3d6a71f9c022e739f8ba7a33ba47eeb844214a192e8483c5a1f1e79e2_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:5891892a01f0965ab06d0f587965e381dbe167fa71592a1798ee143f436eb791_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:5891892a01f0965ab06d0f587965e381dbe167fa71592a1798ee143f436eb791_amd64, registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:5891892a01f0965ab06d0f587965e381dbe167fa71592a1798ee143f436eb791_amd64, registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:5891892a01f0965ab06d0f587965e381dbe167fa71592a1798ee143f436eb791_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus@sha256:3c82cdb31a8d00dc7416bcc86b5e96fc51c7a0d614b821e82f6439e92b8b30b5_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-prometheus@sha256:3c82cdb31a8d00dc7416bcc86b5e96fc51c7a0d614b821e82f6439e92b8b30b5_amd64, registry.redhat.io/openshift4/ose-prometheus@sha256:3c82cdb31a8d00dc7416bcc86b5e96fc51c7a0d614b821e82f6439e92b8b30b5_amd64, registry.redhat.io/openshift4/ose-prometheus@sha256:3c82cdb31a8d00dc7416bcc86b5e96fc51c7a0d614b821e82f6439e92b8b30b5_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator@sha256:44a2a0acdabbabfd2067d9095476eea02a0f9063963aa5fc690f6b436a73de9b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator@sha256:44a2a0acdabbabfd2067d9095476eea02a0f9063963aa5fc690f6b436a73de9b_amd64, *, registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator@sha256:44a2a0acdabbabfd2067d9095476eea02a0f9063963aa5fc690f6b436a73de9b_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:27d61fedcb2f939969787d03cd3b2f55f99daaea6e4e8d1bfd3ca50d096681ed_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:27d61fedcb2f939969787d03cd3b2f55f99daaea6e4e8d1bfd3ca50d096681ed_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:7cd155e29f0d57cfe3fa09f2802c700e52c3f54a940c1360bac107fb9d9678db_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:7cd155e29f0d57cfe3fa09f2802c700e52c3f54a940c1360bac107fb9d9678db_amd64, registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:7cd155e29f0d57cfe3fa09f2802c700e52c3f54a940c1360bac107fb9d9678db_amd64, registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel8@sha256:7cd155e29f0d57cfe3fa09f2802c700e52c3f54a940c1360bac107fb9d9678db_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-machine-approver@sha256:f047ff65da1497ccdf543fb1d64ee02bd4ddb868d1109c6c9dc32980739182f0_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, registry.redhat.io/openshift4/ose-cluster-machine-approver@sha256:f047ff65da1497ccdf543fb1d64ee02bd4ddb868d1109c6c9dc32980739182f0_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-apiserver-rhel8@sha256:7448d85231de6e6f0d3ff80b1654e68265e415fdfc76e5a7b0146715212ef344_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-oauth-apiserver-rhel8@sha256:7448d85231de6e6f0d3ff80b1654e68265e415fdfc76e5a7b0146715212ef344_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:8404aaed34fdf6d4ad8b280eeadfc07ce65317b328bd9fb42d87e3eb79d54473_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:8404aaed34fdf6d4ad8b280eeadfc07ce65317b328bd9fb42d87e3eb79d54473_amd64, registry.redhat.io/openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:8404aaed34fdf6d4ad8b280eeadfc07ce65317b328bd9fb42d87e3eb79d54473_amd64, registry.redhat.io/openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:8404aaed34fdf6d4ad8b280eeadfc07ce65317b328bd9fb42d87e3eb79d54473_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel8@sha256:1fe947cde003e7ae9fd05608ad3aa74cd2e864252dbb3cd348d5bb4fd6b0f7c6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel8@sha256:1fe947cde003e7ae9fd05608ad3aa74cd2e864252dbb3cd348d5bb4fd6b0f7c6_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8@sha256:3be950222006c82f1f5823e56cb7f047781962dd45d3979ad130839ab13fdc2e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8@sha256:3be950222006c82f1f5823e56cb7f047781962dd45d3979ad130839ab13fdc2e_amd64, *, registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8@sha256:3be950222006c82f1f5823e56cb7f047781962dd45d3979ad130839ab13fdc2e_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel8@sha256:fa07db0550420668bad77c11ffebc325783f705ce6137a7d85cd3cbd1f5d405a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel8@sha256:fa07db0550420668bad77c11ffebc325783f705ce6137a7d85cd3cbd1f5d405a_amd64, *, * |
…and 362 more
Timeline
- Oct 23, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:18241 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_18241.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory