VDB

RHSA-2025%3A8552

RHSA-2025%3A8552 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-tests-rhel9@sha256:3aa749121acce851338ad41984472f1eec2584c516ea1fd20bac15108fa0ba33_amd64 as a component of Red Hat OpenShift Container Platform 4.17*, openshift4/ose-tests-rhel9@sha256:3aa749121acce851338ad41984472f1eec2584c516ea1fd20bac15108fa0ba33_amd64, openshift4/ose-tests-rhel9@sha256:3aa749121acce851338ad41984472f1eec2584c516ea1fd20bac15108fa0ba33_amd64
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ad49d6a912e79b6ea25f39e3cab6bb4f2481c037562f9e2aa19b2632da9e6034_ppc64le as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ad49d6a912e79b6ea25f39e3cab6bb4f2481c037562f9e2aa19b2632da9e6034_ppc64le, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ad49d6a912e79b6ea25f39e3cab6bb4f2481c037562f9e2aa19b2632da9e6034_ppc64le, *
Red Hatopenshift4/ose-networking-console-plugin-rhel9@sha256:53098900b8cb5b6d59a2ce8be4ee7da0788b0fda65f2dfd19d577214062defca_s390x as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-networking-console-plugin-rhel9@sha256:53098900b8cb5b6d59a2ce8be4ee7da0788b0fda65f2dfd19d577214062defca_s390x, *, openshift4/ose-networking-console-plugin-rhel9@sha256:53098900b8cb5b6d59a2ce8be4ee7da0788b0fda65f2dfd19d577214062defca_s390x
Red Hatopenshift4/ose-cluster-image-registry-rhel9-operator@sha256:7a3f0e6601587bec4ba885c245713efe533270f24b7b83dc29a3b1adabf60eb2_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-cluster-image-registry-rhel9-operator@sha256:7a3f0e6601587bec4ba885c245713efe533270f24b7b83dc29a3b1adabf60eb2_arm64, *, *
Red Hatopenshift4/ose-docker-builder-rhel9@sha256:7da4532e12e7f69daaf4987db688b9babedbef841ef049ee00174c6e328596ab_ppc64le as a component of Red Hat OpenShift Container Platform 4.17*, openshift4/ose-docker-builder-rhel9@sha256:7da4532e12e7f69daaf4987db688b9babedbef841ef049ee00174c6e328596ab_ppc64le, openshift4/ose-docker-builder-rhel9@sha256:7da4532e12e7f69daaf4987db688b9babedbef841ef049ee00174c6e328596ab_ppc64le
Red Hatopenshift4/ose-ironic-machine-os-downloader-rhel9@sha256:35a6c308521f0385590fa0a761b3207666b24ad95b2c1172c3dede71e2f1bb5c_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:35a6c308521f0385590fa0a761b3207666b24ad95b2c1172c3dede71e2f1bb5c_arm64, *, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:35a6c308521f0385590fa0a761b3207666b24ad95b2c1172c3dede71e2f1bb5c_arm64
Red Hatopenshift4/ose-cluster-image-registry-rhel9-operator@sha256:81172a31fcc97d8fe9d61026bb00b952be6987571b4bd2ed1d080c6b348899c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-cluster-image-registry-rhel9-operator@sha256:81172a31fcc97d8fe9d61026bb00b952be6987571b4bd2ed1d080c6b348899c1_ppc64le, *, *
Red Hatopenshift4/ose-cluster-network-rhel9-operator@sha256:002a3b2e7a4f02538ef4b941d299e2a36a42180b7ca674c084aab1e75c4781fc_amd64 as a component of Red Hat OpenShift Container Platform 4.17*, openshift4/ose-cluster-network-rhel9-operator@sha256:002a3b2e7a4f02538ef4b941d299e2a36a42180b7ca674c084aab1e75c4781fc_amd64, openshift4/ose-cluster-network-rhel9-operator@sha256:002a3b2e7a4f02538ef4b941d299e2a36a42180b7ca674c084aab1e75c4781fc_amd64
Red Hatopenshift4/ose-monitoring-plugin-rhel9@sha256:324b6deb0da3e2ce761f50b403100fbaa91ae2a8cc49dd79ed495ba3dac8f793_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-monitoring-plugin-rhel9@sha256:324b6deb0da3e2ce761f50b403100fbaa91ae2a8cc49dd79ed495ba3dac8f793_arm64, openshift4/ose-monitoring-plugin-rhel9@sha256:324b6deb0da3e2ce761f50b403100fbaa91ae2a8cc49dd79ed495ba3dac8f793_arm64, *
Red Hatopenshift4/ose-tools-rhel9@sha256:d297ad085b326e43890e9a4c147ac3967f6009fc52900ce8bf7e98b02277cf45_s390x as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-tools-rhel9@sha256:d297ad085b326e43890e9a4c147ac3967f6009fc52900ce8bf7e98b02277cf45_s390x, openshift4/ose-tools-rhel9@sha256:d297ad085b326e43890e9a4c147ac3967f6009fc52900ce8bf7e98b02277cf45_s390x, openshift4/ose-tools-rhel9@sha256:d297ad085b326e43890e9a4c147ac3967f6009fc52900ce8bf7e98b02277cf45_s390x
Red Hatopenshift4/ose-tools-rhel9@sha256:d5f90c169ec40741d3d0a512a984b9c7cfecea0e8491e20b666ea116e643a684_arm64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-tools-rhel9@sha256:d5f90c169ec40741d3d0a512a984b9c7cfecea0e8491e20b666ea116e643a684_arm64, openshift4/ose-tools-rhel9@sha256:d5f90c169ec40741d3d0a512a984b9c7cfecea0e8491e20b666ea116e643a684_arm64, openshift4/ose-tools-rhel9@sha256:d5f90c169ec40741d3d0a512a984b9c7cfecea0e8491e20b666ea116e643a684_arm64
Red Hatopenshift4/ose-docker-builder-rhel9@sha256:9220c7ac33e6c6fde896ec389df897d2a960caa5b682f2bb96d772ba41ccf5d4_s390x as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-docker-builder-rhel9@sha256:9220c7ac33e6c6fde896ec389df897d2a960caa5b682f2bb96d772ba41ccf5d4_s390x, openshift4/ose-docker-builder-rhel9@sha256:9220c7ac33e6c6fde896ec389df897d2a960caa5b682f2bb96d772ba41ccf5d4_s390x, openshift4/ose-docker-builder-rhel9@sha256:9220c7ac33e6c6fde896ec389df897d2a960caa5b682f2bb96d772ba41ccf5d4_s390x
Red Hatopenshift4/ose-docker-registry-rhel9@sha256:58ba22680fe50b492f7b639dcd6926bb13e5cb41f8c91d1d279f11cb7cfd4864_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-docker-registry-rhel9@sha256:58ba22680fe50b492f7b639dcd6926bb13e5cb41f8c91d1d279f11cb7cfd4864_amd64, openshift4/ose-docker-registry-rhel9@sha256:58ba22680fe50b492f7b639dcd6926bb13e5cb41f8c91d1d279f11cb7cfd4864_amd64, openshift4/ose-docker-registry-rhel9@sha256:58ba22680fe50b492f7b639dcd6926bb13e5cb41f8c91d1d279f11cb7cfd4864_amd64
Red Hatopenshift4/ose-docker-builder-rhel9@sha256:8ebd67820c702587d710595474935bc30f70717f9b9f1a06030dbea602fb99e6_amd64 as a component of Red Hat OpenShift Container Platform 4.17*, *, openshift4/ose-docker-builder-rhel9@sha256:8ebd67820c702587d710595474935bc30f70717f9b9f1a06030dbea602fb99e6_amd64
Red Hatopenshift4/ose-tests-rhel9@sha256:c651436e2f6608534263b20a4cb988fc7600de705ae3f2913cc35ef1cece20fb_s390x as a component of Red Hat OpenShift Container Platform 4.17*, openshift4/ose-tests-rhel9@sha256:c651436e2f6608534263b20a4cb988fc7600de705ae3f2913cc35ef1cece20fb_s390x, openshift4/ose-tests-rhel9@sha256:c651436e2f6608534263b20a4cb988fc7600de705ae3f2913cc35ef1cece20fb_s390x
Red Hatopenshift4/ose-cluster-image-registry-rhel9-operator@sha256:2951ba9d776cecfbfd3e9bae96aca7893ef59feb046b5cd18d86957e68913752_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-cluster-image-registry-rhel9-operator@sha256:2951ba9d776cecfbfd3e9bae96aca7893ef59feb046b5cd18d86957e68913752_amd64, *, openshift4/ose-cluster-image-registry-rhel9-operator@sha256:2951ba9d776cecfbfd3e9bae96aca7893ef59feb046b5cd18d86957e68913752_amd64
Red Hatopenshift4/ose-tests-rhel9@sha256:36048cdb62b2e96856be66cb09f8e2a619830487f888fa77a1bde692f582103b_ppc64le as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-tests-rhel9@sha256:36048cdb62b2e96856be66cb09f8e2a619830487f888fa77a1bde692f582103b_ppc64le, openshift4/ose-tests-rhel9@sha256:36048cdb62b2e96856be66cb09f8e2a619830487f888fa77a1bde692f582103b_ppc64le, openshift4/ose-tests-rhel9@sha256:36048cdb62b2e96856be66cb09f8e2a619830487f888fa77a1bde692f582103b_ppc64le
Red Hatopenshift4/ose-cluster-image-registry-rhel9-operator@sha256:3efd53faadda7fd158e36bd2d6046fbcd95c5ea7fc9de35998baabbf17a04978_s390x as a component of Red Hat OpenShift Container Platform 4.17*, *, *
Red Hatopenshift4/ose-cloud-credential-rhel9-operator@sha256:80cf231b149724954233728c9768096a6e4441fedbb79aa5a645d6205c5f53e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-cloud-credential-rhel9-operator@sha256:80cf231b149724954233728c9768096a6e4441fedbb79aa5a645d6205c5f53e7_ppc64le, openshift4/ose-cloud-credential-rhel9-operator@sha256:80cf231b149724954233728c9768096a6e4441fedbb79aa5a645d6205c5f53e7_ppc64le, openshift4/ose-cloud-credential-rhel9-operator@sha256:80cf231b149724954233728c9768096a6e4441fedbb79aa5a645d6205c5f53e7_ppc64le
Red Hatopenshift4/ose-tools-rhel9@sha256:3b3ef8ee09e9ed34edb3a4fc704af24db5baa43fca9a8bfe7dd6d2d837375447_amd64 as a component of Red Hat OpenShift Container Platform 4.17openshift4/ose-tools-rhel9@sha256:3b3ef8ee09e9ed34edb3a4fc704af24db5baa43fca9a8bfe7dd6d2d837375447_amd64, *, openshift4/ose-tools-rhel9@sha256:3b3ef8ee09e9ed34edb3a4fc704af24db5baa43fca9a8bfe7dd6d2d837375447_amd64

…and 114 more

Timeline

  • Jun 11, 2025 CVE Published
  • Apr 24, 2026 Distribution Patch
  • Apr 24, 2026 Distribution Patch
  • Apr 24, 2026 Security Advisory
  • Apr 24, 2026 Security Advisory
  • May 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›