VDB
RHSA-2025%3A8560
RHSA-2025%3A8560
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:7e8cf5290aab683556c23f7c91c04d31603f25465629087a36078642ba0d229f_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-networking-console-plugin-rhel9@sha256:7e8cf5290aab683556c23f7c91c04d31603f25465629087a36078642ba0d229f_s390x |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:81479421e54ee29798950e097df2c061f5b49507797c4626f1d48e1e7123fe98_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:81479421e54ee29798950e097df2c061f5b49507797c4626f1d48e1e7123fe98_amd64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:9d08a5af0affb7c178d73489432552c764ec23c3a2dcf5867ed57c709de6ddd6_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-etcd-rhel9@sha256:9d08a5af0affb7c178d73489432552c764ec23c3a2dcf5867ed57c709de6ddd6_amd64, * |
| Red Hat | openshift4/oc-mirror-plugin-rhel9@sha256:a04777318ef5df71bf2d5fccf78dc2bb440c797e9dd851db16071bf10040febb_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/oc-mirror-plugin-rhel9@sha256:a04777318ef5df71bf2d5fccf78dc2bb440c797e9dd851db16071bf10040febb_s390x, openshift4/oc-mirror-plugin-rhel9@sha256:a04777318ef5df71bf2d5fccf78dc2bb440c797e9dd851db16071bf10040febb_s390x, openshift4/oc-mirror-plugin-rhel9@sha256:a04777318ef5df71bf2d5fccf78dc2bb440c797e9dd851db16071bf10040febb_s390x |
| Red Hat | openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le, openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le, openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:910d031f50e5eb4346288a169c37a4ee527ae7fd7b3a604149c87b6b80a05984_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-hyperkube-rhel9@sha256:910d031f50e5eb4346288a169c37a4ee527ae7fd7b3a604149c87b6b80a05984_s390x, openshift4/ose-hyperkube-rhel9@sha256:910d031f50e5eb4346288a169c37a4ee527ae7fd7b3a604149c87b6b80a05984_s390x |
| Red Hat | openshift4/ose-docker-builder-rhel9@sha256:5518df22e6816c2e2ea0d7bbd30151d261ad65d60bb576e27badc8c9f46744c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-docker-builder-rhel9@sha256:5518df22e6816c2e2ea0d7bbd30151d261ad65d60bb576e27badc8c9f46744c1_ppc64le |
| Red Hat | openshift4/ose-monitoring-plugin-rhel9@sha256:3cb54eeb9fe50d54c7f7bed462d44222b5b865d5385b25ed6f9bef90dd533960_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-monitoring-plugin-rhel9@sha256:3cb54eeb9fe50d54c7f7bed462d44222b5b865d5385b25ed6f9bef90dd533960_arm64, openshift4/ose-monitoring-plugin-rhel9@sha256:3cb54eeb9fe50d54c7f7bed462d44222b5b865d5385b25ed6f9bef90dd533960_arm64, openshift4/ose-monitoring-plugin-rhel9@sha256:3cb54eeb9fe50d54c7f7bed462d44222b5b865d5385b25ed6f9bef90dd533960_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:270cd70c4a5c743d74a25416884675c17e73dcb675717c5d2a11c082cf6ff5e8_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/driver-toolkit-rhel9@sha256:270cd70c4a5c743d74a25416884675c17e73dcb675717c5d2a11c082cf6ff5e8_ppc64le, openshift4/driver-toolkit-rhel9@sha256:270cd70c4a5c743d74a25416884675c17e73dcb675717c5d2a11c082cf6ff5e8_ppc64le, openshift4/driver-toolkit-rhel9@sha256:270cd70c4a5c743d74a25416884675c17e73dcb675717c5d2a11c082cf6ff5e8_ppc64le |
| Red Hat | openshift4/ose-pod-rhel9@sha256:56015ee13a62a2b369627455aadb8b3f7b270fbffa53020476c81e7325300b2f_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-pod-rhel9@sha256:56015ee13a62a2b369627455aadb8b3f7b270fbffa53020476c81e7325300b2f_s390x, openshift4/ose-pod-rhel9@sha256:56015ee13a62a2b369627455aadb8b3f7b270fbffa53020476c81e7325300b2f_s390x, * |
| Red Hat | openshift4/ose-installer-rhel9@sha256:68d8faab64d1cb076027ed54363aab37625ac037f06ddc9461b510d2f8e14480_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-rhel9@sha256:68d8faab64d1cb076027ed54363aab37625ac037f06ddc9461b510d2f8e14480_amd64, openshift4/ose-installer-rhel9@sha256:68d8faab64d1cb076027ed54363aab37625ac037f06ddc9461b510d2f8e14480_amd64, openshift4/ose-installer-rhel9@sha256:68d8faab64d1cb076027ed54363aab37625ac037f06ddc9461b510d2f8e14480_amd64 |
| Red Hat | openshift4/ose-kube-proxy-rhel9@sha256:5b305e8bbf0d4ef0a4250cd0fb721180a8f7bc8b7742baf80b29abbd2e6916bf_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-kube-proxy-rhel9@sha256:5b305e8bbf0d4ef0a4250cd0fb721180a8f7bc8b7742baf80b29abbd2e6916bf_amd64, openshift4/ose-kube-proxy-rhel9@sha256:5b305e8bbf0d4ef0a4250cd0fb721180a8f7bc8b7742baf80b29abbd2e6916bf_amd64, openshift4/ose-kube-proxy-rhel9@sha256:5b305e8bbf0d4ef0a4250cd0fb721180a8f7bc8b7742baf80b29abbd2e6916bf_amd64 |
| Red Hat | openshift4/ose-machine-os-images-rhel9@sha256:76344c6343188621ce97216e58cc4fa04d888fda2c10b32a5968a9c718610620_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-machine-os-images-rhel9@sha256:76344c6343188621ce97216e58cc4fa04d888fda2c10b32a5968a9c718610620_arm64, *, openshift4/ose-machine-os-images-rhel9@sha256:76344c6343188621ce97216e58cc4fa04d888fda2c10b32a5968a9c718610620_arm64 |
| Red Hat | openshift4/ose-tools-rhel9@sha256:a976a01b11542586d6beb8f2db1f925d5031bb3f39fb9c83be4f937f72cbf5eb_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-tools-rhel9@sha256:a976a01b11542586d6beb8f2db1f925d5031bb3f39fb9c83be4f937f72cbf5eb_s390x, openshift4/ose-tools-rhel9@sha256:a976a01b11542586d6beb8f2db1f925d5031bb3f39fb9c83be4f937f72cbf5eb_s390x |
| Red Hat | openshift4/ose-installer-altinfra-rhel9@sha256:b5feb16a9dc0714b93e6f29c2e78cccff17eb75150e70e6bf5e6ad3fdab545d1_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-altinfra-rhel9@sha256:b5feb16a9dc0714b93e6f29c2e78cccff17eb75150e70e6bf5e6ad3fdab545d1_arm64, openshift4/ose-installer-altinfra-rhel9@sha256:b5feb16a9dc0714b93e6f29c2e78cccff17eb75150e70e6bf5e6ad3fdab545d1_arm64, openshift4/ose-installer-altinfra-rhel9@sha256:b5feb16a9dc0714b93e6f29c2e78cccff17eb75150e70e6bf5e6ad3fdab545d1_arm64 |
| Red Hat | openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le, openshift4/network-tools-rhel9@sha256:cafc349932b09b957cae52215e783ca4a69efd102d75ec433f5507cde712180e_ppc64le, * |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:498af5bd88cb164b3cb7df75e3116d1ab373049eba5c99bb0429b55138a68092_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-machine-config-rhel9-operator@sha256:498af5bd88cb164b3cb7df75e3116d1ab373049eba5c99bb0429b55138a68092_ppc64le, openshift4/ose-machine-config-rhel9-operator@sha256:498af5bd88cb164b3cb7df75e3116d1ab373049eba5c99bb0429b55138a68092_ppc64le, * |
| Red Hat | openshift4/ose-pod-rhel9@sha256:a45175c4b00acef5c3e762fdb3391048c6cfc91811e0e1f0ba3b89fe6d76ba32_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-pod-rhel9@sha256:a45175c4b00acef5c3e762fdb3391048c6cfc91811e0e1f0ba3b89fe6d76ba32_arm64, openshift4/ose-pod-rhel9@sha256:a45175c4b00acef5c3e762fdb3391048c6cfc91811e0e1f0ba3b89fe6d76ba32_arm64, * |
| Red Hat | rhcos@sha256:207f51d6e691128a3b8d63b49b508b7769bb31299a3e3fad3163b4d6564d364b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | rhcos@sha256:207f51d6e691128a3b8d63b49b508b7769bb31299a3e3fad3163b4d6564d364b_ppc64le, *, rhcos@sha256:207f51d6e691128a3b8d63b49b508b7769bb31299a3e3fad3163b4d6564d364b_ppc64le |
| Red Hat | openshift4/ose-kube-proxy-rhel9@sha256:dcc17505f7b999811d888ca68b34d8eaeed1bbf8c70cba7bee4b5db1576d4940_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-kube-proxy-rhel9@sha256:dcc17505f7b999811d888ca68b34d8eaeed1bbf8c70cba7bee4b5db1576d4940_arm64, openshift4/ose-kube-proxy-rhel9@sha256:dcc17505f7b999811d888ca68b34d8eaeed1bbf8c70cba7bee4b5db1576d4940_arm64 |
…and 212 more
Timeline
- Jun 10, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:8560 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-30260 advisory
- https://issues.redhat.com/browse/OCPBUGS-53428 advisory
- https://issues.redhat.com/browse/OCPBUGS-56384 advisory
- https://issues.redhat.com/browse/OCPBUGS-56659 advisory
- https://issues.redhat.com/browse/OCPBUGS-56703 advisory
- https://issues.redhat.com/browse/OCPBUGS-56732 advisory
- https://issues.redhat.com/browse/OCPBUGS-56757 advisory
- https://issues.redhat.com/browse/OCPBUGS-56793 advisory
- https://issues.redhat.com/browse/OCPBUGS-56823 advisory
- https://issues.redhat.com/browse/OCPBUGS-56864 advisory
- https://issues.redhat.com/browse/OCPBUGS-56919 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8560.json advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
…and 1 more