TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp
jwt-go allows excessive memory allocation during header parsing
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
RHSA-2025:3743
Red Hat build of OpenTelemetry 3.5.1 release
Released 2025-04-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift distributed tracing 3.5.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel8, registry.redhat.io/rhosdt/opentelemetry-rhel8-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel8
Fixes 4 records
TI-2025-21197 CVE-2025-29786 · GHSA-93mq-9ffx-83m2
Memory Exhaustion in Expr Parser with Unrestricted Input
Priority MEDIUM 40
Expr is an expression language and expression evaluation for Go.
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2025-20001 CVE-2025-27144 · GHSA-c6gw-w398-hv78
Go JOSE's Parsing Vulnerable to Denial of Service
Priority LOW 35
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.