Github.Com Golang-Jwt Jwt vulnerabilities

1 known vulnerability affecting github.com/golang-jwt_jwt.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-30204HIGH≥ 3.2.0, ≤ 3.2.22025-03-21

CVE-2025-30204 [HIGH] CWE-405 jwt-go allows excessive memory allocation during header parsing jwt-go allows excessive memory allocation during header parsing ### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](https://pkg.go.dev/strings#Split)) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose _Au