Vulnerability Report: GO-2025-3553
- CVE-2025-30204, GHSA-mh63-6h87-95cp
- Affects: github.com/golang-jwt/jwt, github.com/golang-jwt/jwt/v4, and 1 more
- Published: Mar 26, 2025
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
For detailed information about this vulnerability, visit https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp.
Affected Packages
-
PathGo VersionsSymbols
-
before v4.5.2
-
from v5.0.0-rc.1 before v5.2.2
Affected Modules
-
PathGo Versions
-
all versions, no known fixed
Aliases
References
- https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp
- https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3
- https://vuln.go.dev/ID/GO-2025-3553.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.