VDB
RHSA-2025%3A18242
RHSA-2025%3A18242
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:9966532b094b7f811b53867066415235e294ee5619ec41399a30d8e140d7a7eb_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:9966532b094b7f811b53867066415235e294ee5619ec41399a30d8e140d7a7eb_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:9966532b094b7f811b53867066415235e294ee5619ec41399a30d8e140d7a7eb_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:9966532b094b7f811b53867066415235e294ee5619ec41399a30d8e140d7a7eb_amd64, registry.redhat.io/openshift4/ose-sriov-network-config-daemon@sha256:9966532b094b7f811b53867066415235e294ee5619ec41399a30d8e140d7a7eb_amd64 |
| Red Hat | registry.redhat.io/openshift4/frr-rhel8@sha256:8c6933f4a36a0364b39cca4071de6c68bc640e65ffb9ca92d908df45a4c6e462_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/frr-rhel8@sha256:8c6933f4a36a0364b39cca4071de6c68bc640e65ffb9ca92d908df45a4c6e462_amd64, registry.redhat.io/openshift4/frr-rhel8@sha256:8c6933f4a36a0364b39cca4071de6c68bc640e65ffb9ca92d908df45a4c6e462_amd64, registry.redhat.io/openshift4/frr-rhel8@sha256:8c6933f4a36a0364b39cca4071de6c68bc640e65ffb9ca92d908df45a4c6e462_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:fc897ed2d1d89a346995121242f7da7d97dbb031f60db193015066aba49e086b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, registry.redhat.io/openshift4/ose-operator-sdk-rhel8@sha256:fc897ed2d1d89a346995121242f7da7d97dbb031f60db193015066aba49e086b_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:fc8e01b423979e479bb2c1d08d331076a521a903a109d8360ba6bf151b4b57f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:fc8e01b423979e479bb2c1d08d331076a521a903a109d8360ba6bf151b4b57f2_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:d3d5c47faf993598cba65e74992c5fa2bda7bbf6ed033a1a54249969f361c0bd_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:d3d5c47faf993598cba65e74992c5fa2bda7bbf6ed033a1a54249969f361c0bd_amd64, registry.redhat.io/openshift4/ose-node-feature-discovery@sha256:d3d5c47faf993598cba65e74992c5fa2bda7bbf6ed033a1a54249969f361c0bd_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-operator@sha256:95e0150645e33abeca5376b114e558a3460f4fae1514ea362ba4897bf185cba6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ptp-operator@sha256:95e0150645e33abeca5376b114e558a3460f4fae1514ea362ba4897bf185cba6_amd64, *, registry.redhat.io/openshift4/ose-ptp-operator@sha256:95e0150645e33abeca5376b114e558a3460f4fae1514ea362ba4897bf185cba6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:eeb65b9365fc89882ba68d0f4445d441741b1685b0c950da1a5b19310530e7cf_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:eeb65b9365fc89882ba68d0f4445d441741b1685b0c950da1a5b19310530e7cf_amd64, *, registry.redhat.io/openshift4/ptp-must-gather-rhel8@sha256:eeb65b9365fc89882ba68d0f4445d441741b1685b0c950da1a5b19310530e7cf_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:a25ae0f1ec5ca4db4c739edf0d03c31bdd7feb1b842c912a47e804d85b39b27f_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:a25ae0f1ec5ca4db4c739edf0d03c31bdd7feb1b842c912a47e804d85b39b27f_amd64, registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:a25ae0f1ec5ca4db4c739edf0d03c31bdd7feb1b842c912a47e804d85b39b27f_amd64, registry.redhat.io/openshift4/ose-sriov-network-device-plugin@sha256:a25ae0f1ec5ca4db4c739edf0d03c31bdd7feb1b842c912a47e804d85b39b27f_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ptp@sha256:4b53760cf11aa215adf1b93f4e33ea8796701b5faa14780a245af7825bc1c83d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-ptp@sha256:4b53760cf11aa215adf1b93f4e33ea8796701b5faa14780a245af7825bc1c83d_amd64, registry.redhat.io/openshift4/ose-ptp@sha256:4b53760cf11aa215adf1b93f4e33ea8796701b5faa14780a245af7825bc1c83d_amd64, registry.redhat.io/openshift4/ose-ptp@sha256:4b53760cf11aa215adf1b93f4e33ea8796701b5faa14780a245af7825bc1c83d_amd64 |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:41c630795ffc6e341c06c33918f581edd15d71c419b9481c486fc6aaf11f2f3e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:41c630795ffc6e341c06c33918f581edd15d71c419b9481c486fc6aaf11f2f3e_amd64, registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:41c630795ffc6e341c06c33918f581edd15d71c419b9481c486fc6aaf11f2f3e_amd64, registry.redhat.io/openshift4/metallb-rhel8-operator@sha256:41c630795ffc6e341c06c33918f581edd15d71c419b9481c486fc6aaf11f2f3e_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:1ce1579c5e7eb8b50192c92c2a3c26c396041b3bf4844d0cbb05e14352c924ad_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:1ce1579c5e7eb8b50192c92c2a3c26c396041b3bf4844d0cbb05e14352c924ad_amd64, registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:1ce1579c5e7eb8b50192c92c2a3c26c396041b3bf4844d0cbb05e14352c924ad_amd64, registry.redhat.io/openshift4/ose-sriov-dp-admission-controller@sha256:1ce1579c5e7eb8b50192c92c2a3c26c396041b3bf4844d0cbb05e14352c924ad_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e85195e4157498aaed10046d541dd879ae1417832b2377e5bd0812d63d434002_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e85195e4157498aaed10046d541dd879ae1417832b2377e5bd0812d63d434002_amd64, registry.redhat.io/openshift4/ose-cloud-event-proxy@sha256:e85195e4157498aaed10046d541dd879ae1417832b2377e5bd0812d63d434002_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:da270051ef32441730d625681905414bf53fde16d8c6d7658d079b944470e1e1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:da270051ef32441730d625681905414bf53fde16d8c6d7658d079b944470e1e1_amd64, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:da270051ef32441730d625681905414bf53fde16d8c6d7658d079b944470e1e1_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64, registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64, registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64 |
| Red Hat | registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b8c4ce04d2fcc540a76397e401bf6db60c4ef3d086752f2c84122fa9ada51f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b8c4ce04d2fcc540a76397e401bf6db60c4ef3d086752f2c84122fa9ada51f2_amd64, registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b8c4ce04d2fcc540a76397e401bf6db60c4ef3d086752f2c84122fa9ada51f2_amd64, registry.redhat.io/openshift4/kubernetes-nmstate-rhel8-operator@sha256:7b8c4ce04d2fcc540a76397e401bf6db60c4ef3d086752f2c84122fa9ada51f2_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64, registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64, registry.redhat.io/openshift4/ose-sriov-infiniband-cni@sha256:b156ffcfea8c75a975c442c2fa589ebfc60e96c83aa54e65e6dd26d5bc47ec5c_amd64 |
| Red Hat | registry.redhat.io/openshift4/metallb-rhel8@sha256:389a254ca74176bfd1a28c105e3a9b5f4b444986254538e6ced00a2205d3e621_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/metallb-rhel8@sha256:389a254ca74176bfd1a28c105e3a9b5f4b444986254538e6ced00a2205d3e621_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:0bbb1a044ef3af51d653cec5d9f482157c0a4fa51d2b6a2a0c888722f93402c6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:0bbb1a044ef3af51d653cec5d9f482157c0a4fa51d2b6a2a0c888722f93402c6_amd64, registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:0bbb1a044ef3af51d653cec5d9f482157c0a4fa51d2b6a2a0c888722f93402c6_amd64, registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel8@sha256:0bbb1a044ef3af51d653cec5d9f482157c0a4fa51d2b6a2a0c888722f93402c6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:99b2c2e0f8ddb23e34fc12bff32de5d2b5c66d1b71d3cd5981bdab98e5979827_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:99b2c2e0f8ddb23e34fc12bff32de5d2b5c66d1b71d3cd5981bdab98e5979827_amd64, registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:99b2c2e0f8ddb23e34fc12bff32de5d2b5c66d1b71d3cd5981bdab98e5979827_amd64, registry.redhat.io/openshift4/ose-local-storage-diskmaker@sha256:99b2c2e0f8ddb23e34fc12bff32de5d2b5c66d1b71d3cd5981bdab98e5979827_amd64 |
…and 56 more
Timeline
- Oct 23, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:18242 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/cve/CVE-2025-53547 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_18242.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2378905 issue
- https://www.cve.org/CVERecord?id=CVE-2025-53547 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-53547 advisory
- https://github.com/helm/helm/commit/4b8e61093d8f579f1165cdc6bd4b43fa5455f571 advisory
- https://github.com/helm/helm/security/advisories/GHSA-557j-xg8c-q2mm advisory