VDB
RHSA-2025%3A8384
RHSA-2025%3A8384
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:81a611c2491c2a7c8077737798b3ace2e5d99b3f4503fe74290a31e09e4819ed_ppc64le as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:81a611c2491c2a7c8077737798b3ace2e5d99b3f4503fe74290a31e09e4819ed_ppc64le, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:81a611c2491c2a7c8077737798b3ace2e5d99b3f4503fe74290a31e09e4819ed_ppc64le, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9fcb44509395c41aa382d81b4656dd436509de3e24ee083fc355d1d65486c95b_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | *, *, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5bbae22bbfb6e0c9d3fda53b77b130c14f35bb959dabd15d745f5f82b4daac5d_ppc64le as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5bbae22bbfb6e0c9d3fda53b77b130c14f35bb959dabd15d745f5f82b4daac5d_ppc64le, multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5bbae22bbfb6e0c9d3fda53b77b130c14f35bb959dabd15d745f5f82b4daac5d_ppc64le, multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:5bbae22bbfb6e0c9d3fda53b77b130c14f35bb959dabd15d745f5f82b4daac5d_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:09f645545219ee3de254074857dc2bb32c6340a48ed3c9e82e59bf27ad4aacbb_ppc64le as a component of multicluster-globalhub 1.4 for RHEL 9 | *, *, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:09f645545219ee3de254074857dc2bb32c6340a48ed3c9e82e59bf27ad4aacbb_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64, *, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:5af8c398b0645b42c605d18e01c2cea239daca09eb734e684ede68ba23290b57_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:5af8c398b0645b42c605d18e01c2cea239daca09eb734e684ede68ba23290b57_amd64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:5af8c398b0645b42c605d18e01c2cea239daca09eb734e684ede68ba23290b57_amd64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:5af8c398b0645b42c605d18e01c2cea239daca09eb734e684ede68ba23290b57_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:40ff3889bb6d591134604d1a978d435f7eccf56246987306693c6493716a4521_ppc64le as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:40ff3889bb6d591134604d1a978d435f7eccf56246987306693c6493716a4521_ppc64le, multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:40ff3889bb6d591134604d1a978d435f7eccf56246987306693c6493716a4521_ppc64le, multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:40ff3889bb6d591134604d1a978d435f7eccf56246987306693c6493716a4521_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9d11402f46b34500a28412a9b0eb7ce44d8bbc6129a6d911e2794aa89acf67b1_s390x as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9d11402f46b34500a28412a9b0eb7ce44d8bbc6129a6d911e2794aa89acf67b1_s390x, multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9d11402f46b34500a28412a9b0eb7ce44d8bbc6129a6d911e2794aa89acf67b1_s390x, multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:9d11402f46b34500a28412a9b0eb7ce44d8bbc6129a6d911e2794aa89acf67b1_s390x |
| Red Hat | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:258e9c8ed4d51d35ff0504d2aaba41ccd3be9530381b5174014956e4829a3289_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:258e9c8ed4d51d35ff0504d2aaba41ccd3be9530381b5174014956e4829a3289_amd64, *, multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9@sha256:258e9c8ed4d51d35ff0504d2aaba41ccd3be9530381b5174014956e4829a3289_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:5af8c398b0645b42c605d18e01c2cea239daca09eb734e684ede68ba23290b57_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | *, *, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:610306437a1e0625f1045be211ef9b5c8885888eded5f21e50108803c410b08a_s390x as a component of multicluster-globalhub 1.4 for RHEL 9 | *, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:610306437a1e0625f1045be211ef9b5c8885888eded5f21e50108803c410b08a_s390x, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64 as a component of multicluster-globalhub 1.4 for RHEL 9 | *, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:7e469083497321960ac2e8e56376ae8b41e15b3d343d448d16de5392aaeb23ce_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:11279750df36585eff8f65c5bbc5309f566a9f2158d320e69f03d67337c4ae5b_arm64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:11279750df36585eff8f65c5bbc5309f566a9f2158d320e69f03d67337c4ae5b_arm64, *, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:11279750df36585eff8f65c5bbc5309f566a9f2158d320e69f03d67337c4ae5b_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6923a4862d478f02754d586b77d17e40110c8c63cb8d37ab33a306f3b54220bc_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6923a4862d478f02754d586b77d17e40110c8c63cb8d37ab33a306f3b54220bc_amd64, *, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:6923a4862d478f02754d586b77d17e40110c8c63cb8d37ab33a306f3b54220bc_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9fcb44509395c41aa382d81b4656dd436509de3e24ee083fc355d1d65486c95b_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | *, *, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:18f747d4d14977272e8fe79cb56ee4c2e73b54e0efbb734bc649b67cd5393fb2_arm64 as a component of multicluster-globalhub 1.4 for RHEL 9 | *, *, multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:18f747d4d14977272e8fe79cb56ee4c2e73b54e0efbb734bc649b67cd5393fb2_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eb74aa49d9e0240bc18a6442e89ab6df5a2526793bd1de8dc293d5b637bdf125_amd64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eb74aa49d9e0240bc18a6442e89ab6df5a2526793bd1de8dc293d5b637bdf125_amd64, multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eb74aa49d9e0240bc18a6442e89ab6df5a2526793bd1de8dc293d5b637bdf125_amd64, multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:eb74aa49d9e0240bc18a6442e89ab6df5a2526793bd1de8dc293d5b637bdf125_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:ed58a715637cc19dd40fa215128c797000adc178b63903750d4cc927957d8fbd_ppc64le as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:ed58a715637cc19dd40fa215128c797000adc178b63903750d4cc927957d8fbd_ppc64le, *, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:ed58a715637cc19dd40fa215128c797000adc178b63903750d4cc927957d8fbd_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:648f2815daeb1f1bf4bb79f93dafb3a112347283e3efb0ab71918ce47d7984e7_arm64 as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:648f2815daeb1f1bf4bb79f93dafb3a112347283e3efb0ab71918ce47d7984e7_arm64, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:648f2815daeb1f1bf4bb79f93dafb3a112347283e3efb0ab71918ce47d7984e7_arm64, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0f43487825d94e95eda812c2dd59c37aa674664b662614c82b8a8573bc1983c9_s390x as a component of multicluster-globalhub 1.4 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0f43487825d94e95eda812c2dd59c37aa674664b662614c82b8a8573bc1983c9_s390x, *, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:0f43487825d94e95eda812c2dd59c37aa674664b662614c82b8a8573bc1983c9_s390x |
…and 36 more
Timeline
- Jun 2, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:8384 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8384.json advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory