TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp
jwt-go allows excessive memory allocation during header parsing
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
RHSA-2025:11669
OpenShift Container Platform 4.14.54 bug fix and security update
Released 2025-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-registry, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8, openshift4/ose-nutanix-machine-controllers-rhel8
Fixes 4 records
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.