TI-2025-21540 CVE-2025-30204 · GHSA-mh63-6h87-95cp
jwt-go allows excessive memory allocation during header parsing
Priority MEDIUM 40
golang-jwt is a Go implementation of JSON Web Tokens.
RHSA-2025:4810
RHSA: Submariner 0.18.5 - bug and security update
Released 2025-05-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/lighthouse-agent-rhel9, rhacm2/lighthouse-coredns-rhel9, rhacm2/nettest-rhel9 +6
Fixes 5 records
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2024-35722 CVE-2024-53259 · GHSA-px8v-pp82-rcvr
quic-go affected by an ICMP Packet Too Large Injection Attack on Linux
Priority LOW 30
quic-go is an implementation of the QUIC protocol in Go.
TI-2024-30406 CVE-2024-45336 · GHSA-7wrw-r4p8-38rx
Sensitive headers incorrectly sent after cross-domain redirect in net/http
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
TI-2025-16738 CVE-2025-22866 · GHSA-3whm-j4xm-rv8x
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.