`github.com/golang-jwt/jwt/v4`

Ecosystem:
go

Package URL:
pkg:golang/github.com/golang-jwt/jwt/v4

Total PRs:
579 Dependabot PRs

Latest PR:
19 days ago

Unique Repositories:
448 repositories

Unique Repos (30 days):
12 repositories

Security Advisories

jwt-go allows excessive memory allocation during header parsing

GHSA-mh63-6h87-95cp CVE-2025-30204 HIGH published 7 months ago • updated 2 months ago

### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139...

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations

GHSA-29wx-vh33-7x7r CVE-2024-51744 LOW published 12 months ago • updated 3 months ago

### Summary Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors...

Recent PRs

RSS Feed

Bump the go_modules group across 1 directory with 3 updates

draghtnight/prysm #1

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

chore(deps): bump the go_modules group across 1 directory with 4 updates

draghtnight/optimism #1

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

build(deps): bump the go_modules group across 1 directory with 2 updates

draghtnight/go-ethereum #1

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

build(deps): bump the go_modules group across 1 directory with 3 updates

draghtnight/rpctestgen #1

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

chore(deps): bump the go_modules group across 1 directory with 16 updates

spencercjh/kubeblocks #1

4.5.0 → 4.5.2 Patch PR

Open 6 months ago

Bump github.com/golang-jwt/jwt/v4 from 4.3.0 to 4.5.2

elishamsmith/resolution #6

4.3.0 → 4.5.2 Minor PR

Open 6 months ago

chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

jauderho/lego #318

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

Bump the go_modules group across 1 directory with 10 updates

aperera/gitea #2

4.5.0 → 4.5.1 Patch PR

Open 6 months ago

build(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.5.2 in /rollouts

kptdev/kpt #4192

4.2.0 → 4.5.2 Minor PR

Open 6 months ago

Bump the go_modules group across 1 directory with 2 updates

omarashzeinhom/movie-imdb-clone-neo4j #4

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

gravitl/netmaker #3447

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago 1 comment

Bump the go_modules group across 11 directories with 6 updates

atomicworkhq/atomic-flyte #9

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago 1 comment

Bump the go_modules group across 1 directory with 4 updates

offsoc/zrok #8

4.5.1 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the dependencies group with 21 updates

Scalingo/terraform-provider-scalingo #222

4.5.1 → 4.5.2 Patch PR

Open 6 months ago 4 comments

Bump the go_modules group with 3 updates

paketo-buildpacks/jam #387

4.5.1 → 4.5.2 Patch PR

Open 6 months ago 2 comments

build(deps): bump the go_modules group across 1 directory with 2 updates

offsoc/forgejo #7

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

go.mod: bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2

willnorris/imageproxy #457

4.5.0 → 4.5.2 Patch PR

Open 6 months ago 2 comments

Bump the go-lib-update group across 1 directory with 6 updates

tiagompalte/golang-clean-arch-template #29

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

chore(deps): bump the go_modules group across 1 directory with 4 updates

projectdiscovery/nuclei #6199

4.5.1 → 4.5.2 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

alt-research/mach-avs #191

4.5.1 → 4.5.2 Patch PR

Open 6 months ago

chore(deps): bump the go_modules group with 2 updates

yavurb/goyurback #43

4.5.1 → 4.5.2 Patch PR

Closed 6 months ago 2 comments

Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

jonesrussell/goforms #8

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

Bump the go_modules group across 1 directory with 3 updates

openshift/managed-node-metadata-operator #132

4.4.2 → 4.5.2 Minor PR

Open 6 months ago 5 comments

chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

AKJUS/nebula #11

4.5.1 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 3 updates

tokenetes/tokenetes #74

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

Bump the go_modules group across 1 directory with 3 updates

Sander0542/terraform-provider-nginxproxymanager #194

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

build(deps): bump the go_modules group across 1 directory with 5 updates

offsoc/apiserver #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): Bump the go_modules group across 4 directories with 5 updates

offsoc/talos #2

4.5.0 → 4.5.1 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the go_modules group across 10 directories with 3 updates

offsoc/etcd #2

4.5.1 → 4.5.2 Patch PR

Open 6 months ago 1 comment

Bump the go_modules group across 1 directory with 8 updates

offsoc/openshift-origin #1

4.5.0 → 4.5.1 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the go_modules group across 1 directory with 5 updates

offsoc/openim-chat #2

4.5.0 → 4.5.2 Patch PR

Merged 6 months ago

build(deps): bump the go_modules group across 1 directory with 4 updates

offsoc/open-im-server #2

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago

Bump the go_modules group across 1 directory with 8 updates

offsoc/spire #2

4.5.0 → 4.5.1 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 5 updates

offsoc/Slack #4

4.5.0 → 4.5.1 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 4 updates

offsoc/netmaker #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 3 updates

getfider/fider #1284

4.1.0 → 4.5.2 Minor PR

Open 6 months ago 1 comment

Bump the go_modules group across 1 directory with 3 updates

offsoc/actions-runner-controller #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the go_modules group across 1 directory with 4 updates

offsoc/bk-cmdb #2

4.5.0 → 4.5.2 Patch PR

Merged 6 months ago

build(deps): bump the go_modules group across 1 directory with 7 updates

offsoc/gex #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the go_modules group across 1 directory with 7 updates

offsoc/TangSengDaoDaoServer #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the go_modules group across 10 directories with 5 updates

offsoc/dashboard #4

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 5 updates

offsoc/cloudfox #2

4.5.0 → 4.5.1 Patch PR

Merged 6 months ago

Bump the go_modules group across 5 directories with 12 updates

offsoc/dddd #2

4.5.0 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 6 updates

offsoc/vscan #5

4.3.0 → 4.5.2 Minor PR

Closed 6 months ago 1 comment

Bump the go_modules group across 1 directory with 7 updates

offsoc/zoraxy #2

4.5.0 → 4.5.1 Patch PR

Closed 6 months ago 1 comment

chore(deps): Bump the go_modules group across 1 directory with 6 updates

offsoc/telegraf #3

4.5.1 → 4.5.2 Patch PR

Closed 6 months ago 1 comment

chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2

Devleaps/github-secret-synchronizer #7

4.5.1 → 4.5.2 Patch PR

Merged 6 months ago 5 comments

Bump the go_modules group across 6 directories with 15 updates

offsoc/autoscaler #2

4.5.0 → 4.5.1 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump the go_modules group across 12 directories with 9 updates

offsoc/cds #2

4.5.0 → 4.5.2 Patch PR

Closed 7 months ago 1 comment

Bump the all-dependencies group with 2 updates

pflege-de/Connect #7

4.5.0 → 4.5.2 Patch PR

Open 7 months ago 1 comment

Package Details

Name:	`github.com/golang-jwt/jwt/v4`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/golang-jwt/jwt/v4`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All golang Advisories

Package Information

Description:

Package jwt is a Go implementation of JSON Web Tokens: http://self-issued.info/docs/draft-jones-json-web-token.html See README.md for more info.

Repository:	https://github.com/golang-jwt/jwt
Homepage:	https://github.com/golang-jwt/jwt
Latest Release:	`v4.5.2` 7 months ago
Dependent Repos:	22,852
Dependent Packages:	15,582
Ranking:	Top 0.0419% by dependent repos Top 0.0195% by dependent pkgs

PR Status

Open 269 (46.5%)

Merged 105 (18.1%)

Closed 147 (25.4%)

PR Types

Minor 101 (17.4%)

Patch 420 (72.5%)