VDB
RHSA-2025%3A9388
RHSA-2025%3A9388
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may trigger an excessive consumption of resources on the host system. This issue can cause significant performance degradation or an application crash, leading to a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x, *, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:03c1e41f066a35e2e5966e9fa51001cac526718ccbee922bb7a5f71855975f89_ppc64le as a component of multicluster-globalhub 1.2 for RHEL 9 | *, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:03c1e41f066a35e2e5966e9fa51001cac526718ccbee922bb7a5f71855975f89_ppc64le, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64, *, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x, *, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8cca187ef801fba6b634e12438fee6e5c45ce6a46326133f4db0477c013915fe_s390x |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:315948db581e6ac396ea5ae1613e79a786e14ea04589d7f02ad995f54d3b8562_amd64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:315948db581e6ac396ea5ae1613e79a786e14ea04589d7f02ad995f54d3b8562_amd64, *, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9c8a514abb0720f80023fba951afeb5eaf9f5cfb5feacca97d0550f413d06257_s390x as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9c8a514abb0720f80023fba951afeb5eaf9f5cfb5feacca97d0550f413d06257_s390x, *, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:9c8a514abb0720f80023fba951afeb5eaf9f5cfb5feacca97d0550f413d06257_s390x |
| Red Hat | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:d0acb4542fcc52a35100a641d2a1beb9a109cfe67ac0a51dd596e7b85dedd3af_s390x as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:d0acb4542fcc52a35100a641d2a1beb9a109cfe67ac0a51dd596e7b85dedd3af_s390x, multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:d0acb4542fcc52a35100a641d2a1beb9a109cfe67ac0a51dd596e7b85dedd3af_s390x, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:14ecb13934f0b91726f46e7fad9b0e4751893202d18bdcdd0ef4c410d46e4c78_arm64, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3baf23798e321b1f31288e59edadfa14c9d0ca3d0c10836b34e9b14dfcd4dc3a_s390x as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3baf23798e321b1f31288e59edadfa14c9d0ca3d0c10836b34e9b14dfcd4dc3a_s390x, *, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:3baf23798e321b1f31288e59edadfa14c9d0ca3d0c10836b34e9b14dfcd4dc3a_s390x |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d0eb66cc9fd1a22076cac826abcf3aa9ac89d930e34b3188d986973a320e9688_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d0eb66cc9fd1a22076cac826abcf3aa9ac89d930e34b3188d986973a320e9688_arm64, *, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:d0eb66cc9fd1a22076cac826abcf3aa9ac89d930e34b3188d986973a320e9688_arm64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9e4aaa4707ba23541e490ef38628a88df1fe2b209dfefe1e9024c1e878be5e5a_ppc64le as a component of multicluster-globalhub 1.2 for RHEL 9 | *, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9e4aaa4707ba23541e490ef38628a88df1fe2b209dfefe1e9024c1e878be5e5a_ppc64le, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:9e4aaa4707ba23541e490ef38628a88df1fe2b209dfefe1e9024c1e878be5e5a_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:15ae03bcf34b6b7641dae31ba4c94dc9a39c578bfaaa02936171826b5b868796_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | *, *, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64, multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:1651a6595b596b66682dc01bf3ed833dfefb1e8e325d1ba777f8cc3c954c9732_arm64, * |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le as a component of multicluster-globalhub 1.2 for RHEL 9 | *, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:b317d7f2bc8dbbc5e5ccf538708efe221794b22b936914e05ad928b853d3dba4_ppc64le |
| Red Hat | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64, multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:70082db3f6153798e657fb27615a193b3ae44e7bfa3137407806cd9310934d3b_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:56ecb72f58d6996bcda77c3dc1967a425b95b32c9cbc38780f935d12f9878a18_amd64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:56ecb72f58d6996bcda77c3dc1967a425b95b32c9cbc38780f935d12f9878a18_amd64, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:56ecb72f58d6996bcda77c3dc1967a425b95b32c9cbc38780f935d12f9878a18_amd64, multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:56ecb72f58d6996bcda77c3dc1967a425b95b32c9cbc38780f935d12f9878a18_amd64 |
| Red Hat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:faa42fb6d63b6a01f3c84c51bb5d8bb34b926fb2f769344679f661ea44db18d1_amd64 as a component of multicluster-globalhub 1.2 for RHEL 9 | multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:faa42fb6d63b6a01f3c84c51bb5d8bb34b926fb2f769344679f661ea44db18d1_amd64, *, multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:faa42fb6d63b6a01f3c84c51bb5d8bb34b926fb2f769344679f661ea44db18d1_amd64 |
…and 30 more
Timeline
- Jun 23, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:9388 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9388.json advisory
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-30204 advisory
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 advisory
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory