VDB
RHSA-2025%3A9259
RHSA-2025%3A9259
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-prometheus-config-reloader-rhel9@sha256:f280a47525fd8f7f9d02ae1fda0554c6a401da50295aa6f588ec66ac4c3d04b9_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-prometheus-config-reloader-rhel9@sha256:f280a47525fd8f7f9d02ae1fda0554c6a401da50295aa6f588ec66ac4c3d04b9_arm64, * |
| Red Hat | openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x, openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x, openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x |
| Red Hat | openshift4/ose-olm-operator-controller-rhel8@sha256:572712da3e4e40e8243bbda8a6cccb59fbbb589c073127fdfd0beb60d782c80d_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-olm-operator-controller-rhel8@sha256:572712da3e4e40e8243bbda8a6cccb59fbbb589c073127fdfd0beb60d782c80d_s390x, *, openshift4/ose-olm-operator-controller-rhel8@sha256:572712da3e4e40e8243bbda8a6cccb59fbbb589c073127fdfd0beb60d782c80d_s390x |
| Red Hat | openshift4/ose-console@sha256:a4a43662ba0d9e9627bcb854faaa2c85a5fd83cc1c32b1a98ba8f1d6ceed1c34_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d9b2c70c4235585a58f3c0da4a54616aa8579489e3cfb1aa076082b450cbae33_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d9b2c70c4235585a58f3c0da4a54616aa8579489e3cfb1aa076082b450cbae33_amd64, openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d9b2c70c4235585a58f3c0da4a54616aa8579489e3cfb1aa076082b450cbae33_amd64, openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d9b2c70c4235585a58f3c0da4a54616aa8579489e3cfb1aa076082b450cbae33_amd64 |
| Red Hat | openshift4/ose-must-gather@sha256:4cf1d08077103d098e0d9fb1b2838ad64d793d289444415936565067a71690df_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-must-gather@sha256:4cf1d08077103d098e0d9fb1b2838ad64d793d289444415936565067a71690df_amd64, openshift4/ose-must-gather@sha256:4cf1d08077103d098e0d9fb1b2838ad64d793d289444415936565067a71690df_amd64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:2431092ebdf686d730ccf88ace1bfbb4294d71a54a34ebaf2b5eb502c3abf85c_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-machine-api-rhel9-operator@sha256:2431092ebdf686d730ccf88ace1bfbb4294d71a54a34ebaf2b5eb502c3abf85c_ppc64le, openshift4/ose-machine-api-rhel9-operator@sha256:2431092ebdf686d730ccf88ace1bfbb4294d71a54a34ebaf2b5eb502c3abf85c_ppc64le |
| Red Hat | openshift4/ose-cluster-ingress-rhel9-operator@sha256:398256a00092ec8e2c5cedb25767a1edc11deea195ab56fd8f47106474734901_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-ingress-rhel9-operator@sha256:398256a00092ec8e2c5cedb25767a1edc11deea195ab56fd8f47106474734901_amd64, openshift4/ose-cluster-ingress-rhel9-operator@sha256:398256a00092ec8e2c5cedb25767a1edc11deea195ab56fd8f47106474734901_amd64, openshift4/ose-cluster-ingress-rhel9-operator@sha256:398256a00092ec8e2c5cedb25767a1edc11deea195ab56fd8f47106474734901_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:ab4b76344d04bbe32c200c93a8da20994be4181c1a9c2c3b1b82e0216d27196c_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:ab4b76344d04bbe32c200c93a8da20994be4181c1a9c2c3b1b82e0216d27196c_amd64, *, openshift4/ose-cluster-autoscaler-rhel9-operator@sha256:ab4b76344d04bbe32c200c93a8da20994be4181c1a9c2c3b1b82e0216d27196c_amd64 |
| Red Hat | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:e33a0991713f5a0cb7dd0f0df495fbf566ec200bc66bef10d80c04147f21ef4d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:e33a0991713f5a0cb7dd0f0df495fbf566ec200bc66bef10d80c04147f21ef4d_ppc64le, openshift4/ose-operator-lifecycle-manager-rhel9@sha256:e33a0991713f5a0cb7dd0f0df495fbf566ec200bc66bef10d80c04147f21ef4d_ppc64le, * |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel9@sha256:e8f1646c0717de4d4b3541ee392aa30089603ee83c318addeadd31b5c1d29fec_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-controller-manager-rhel9@sha256:e8f1646c0717de4d4b3541ee392aa30089603ee83c318addeadd31b5c1d29fec_s390x, openshift4/ose-openshift-controller-manager-rhel9@sha256:e8f1646c0717de4d4b3541ee392aa30089603ee83c318addeadd31b5c1d29fec_s390x, openshift4/ose-openshift-controller-manager-rhel9@sha256:e8f1646c0717de4d4b3541ee392aa30089603ee83c318addeadd31b5c1d29fec_s390x |
| Red Hat | openshift4/ose-cli@sha256:a587eb945a72277401796aeaabed98cd3f6929da781a71a74732648cdd0c4b30_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-cli@sha256:a587eb945a72277401796aeaabed98cd3f6929da781a71a74732648cdd0c4b30_arm64, openshift4/ose-cli@sha256:a587eb945a72277401796aeaabed98cd3f6929da781a71a74732648cdd0c4b30_arm64 |
| Red Hat | openshift4/ose-oauth-server-rhel9@sha256:a46116f464d4d6fa3277e556af03becfe187b62b5d2bfd3d1207515a526357dc_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-must-gather@sha256:f9340e670bbc7f1a9d71217570f54934683d9ee3c245051594b78b7ec12b4ae0_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-must-gather@sha256:f9340e670bbc7f1a9d71217570f54934683d9ee3c245051594b78b7ec12b4ae0_arm64 |
| Red Hat | openshift4/ose-pod-rhel9@sha256:cae41139ff826e2a6ae25283e92258176bc9e67604c84cfdd251c543b53dcf7c_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-pod-rhel9@sha256:cae41139ff826e2a6ae25283e92258176bc9e67604c84cfdd251c543b53dcf7c_amd64, openshift4/ose-pod-rhel9@sha256:cae41139ff826e2a6ae25283e92258176bc9e67604c84cfdd251c543b53dcf7c_amd64, openshift4/ose-pod-rhel9@sha256:cae41139ff826e2a6ae25283e92258176bc9e67604c84cfdd251c543b53dcf7c_amd64 |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:a1f28c081380756557572255db8f5e2758f0e8a9b3d677232cd1aeca15b1be89_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:a1f28c081380756557572255db8f5e2758f0e8a9b3d677232cd1aeca15b1be89_arm64, *, * |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:49d2be922ccdcc83c0cb4d39824aff6d48e3675478d2a33fa81f05991651100a_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-altinfra-rhel8@sha256:49d2be922ccdcc83c0cb4d39824aff6d48e3675478d2a33fa81f05991651100a_arm64, openshift4/ose-installer-altinfra-rhel8@sha256:49d2be922ccdcc83c0cb4d39824aff6d48e3675478d2a33fa81f05991651100a_arm64, openshift4/ose-installer-altinfra-rhel8@sha256:49d2be922ccdcc83c0cb4d39824aff6d48e3675478d2a33fa81f05991651100a_arm64 |
| Red Hat | openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x, openshift4/ose-oauth-server-rhel9@sha256:94740f43008a974faf8ec059bb7d784172f070d678cb7db095f314f9cd824a1e_s390x |
| Red Hat | openshift4/network-tools-rhel8@sha256:2dc640b3152507a98e30d2af10dadbddf9fa0e6c0f34dc830bfad15450dcc222_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/network-tools-rhel8@sha256:2dc640b3152507a98e30d2af10dadbddf9fa0e6c0f34dc830bfad15450dcc222_ppc64le |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:91da5a5301bf710ae31d6ae918d4590e9836cf3e865b73024f26505fdee2f7b6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
…and 1309 more
Timeline
- Jun 26, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:9259 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-46467 advisory
- https://issues.redhat.com/browse/OCPBUGS-56463 advisory
- https://issues.redhat.com/browse/OCPBUGS-56474 advisory
- https://issues.redhat.com/browse/OCPBUGS-56649 advisory
- https://issues.redhat.com/browse/OCPBUGS-57097 advisory
- https://issues.redhat.com/browse/OCPBUGS-57121 advisory
- https://issues.redhat.com/browse/OCPBUGS-57340 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9259.json advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory