—
GO-2025-3553
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
Quick fix
GO-2025-3553 — github.com/golang-jwt/jwt/v4: upgrade to the fixed version with the command below.
go get github.com/golang-jwt/jwt/v4@v4.5.2Details
Excessive memory allocation during header parsing in github.com/golang-jwt/jwt
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/golang-jwt/jwt
Introduced in:
0 No fixed version published yet for github.com/golang-jwt/jwt (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/golang-jwt/jwt/v4
Introduced in:
0 Fixed in: 4.5.2 Fix
go get github.com/golang-jwt/jwt/v4@v4.5.2 Go / github.com/golang-jwt/jwt/v5
Introduced in:
5.0.0-rc.1 Fixed in: 5.2.2 Fix
go get github.com/golang-jwt/jwt/v5@v5.2.2