GO-2025-3553
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2025-30204
- Alias
- GHSA-mh63-6h87-95cp
Description
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/golang-jwt/jwt | introduced 0 |
| Go · github.com/golang-jwt/jwt/v4 | introduced 0, fixed 4.5.2 |
| Go · github.com/golang-jwt/jwt/v5 | introduced 5.0.0-rc.1, fixed 5.2.2 |
Références
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp ADVISORY
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |