`github.com/golang-jwt/jwt/v4`

Ecosystem:
go

Package URL:
pkg:golang/github.com/golang-jwt/jwt/v4

Total PRs:
584 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
451 repositories

Unique Repos (30 days):
6 repositories

Security Advisories

jwt-go allows excessive memory allocation during header parsing

GHSA-mh63-6h87-95cp CVE-2025-30204 HIGH published 8 months ago • updated 3 months ago

### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139...

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations

GHSA-29wx-vh33-7x7r CVE-2024-51744 LOW published 12 months ago • updated 3 months ago

### Summary Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checking errors...

Recent PRs (filtered by: Closed , Minor PRs )

RSS Feed Clear filter

Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.2

kunickiaj/beer #156

4.4.2 → 4.5.2 Minor PR

Closed about 1 month ago 1 comment

Bump github.com/golang-jwt/jwt/v4 from 4.1.0 to 4.5.2

tapsilat/iban.im #147

4.1.0 → 4.5.2 Minor PR

Closed about 1 month ago 1 comment

Bump the go_modules group across 1 directory with 12 updates

spring-financial-group/helmfile #33

4.0.0 → 4.5.2 Minor PR

Closed 3 months ago 1 comment

Bump the go_modules group across 2 directories with 8 updates

offsoc/registry.k8s.io #5

4.4.2 → 4.5.2 Minor PR

Closed 3 months ago 1 comment

Bump the go_modules group with 8 updates

alexkinch/evans #11

4.4.1 → 4.5.2 Minor PR

Closed 5 months ago 3 comments

Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.2

kontaktio/telegraf_archived #12

4.4.2 → 4.5.2 Minor PR

Closed 5 months ago 1 comment

Bump the go_modules group across 1 directory with 6 updates

offsoc/vscan #5

4.3.0 → 4.5.2 Minor PR

Closed 7 months ago 1 comment

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.2 in /cmd/configschema

mar4uk/opentelemetry-collector-contrib #16778

4.4.3 → 4.5.2 Minor PR

Closed 8 months ago 2 comments

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.2

mar4uk/opentelemetry-collector-contrib #16777

4.4.3 → 4.5.2 Minor PR

Closed 8 months ago 3 comments

Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.2

alexislefebvre/photoprism #581

4.4.2 → 4.5.2 Minor PR

Closed 8 months ago

chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.2

vearch/vearch #832

4.4.2 → 4.5.2 Minor PR

Closed 8 months ago

build(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.2

Pylons-tech/pylons #2647

4.4.2 → 4.5.2 Minor PR

Closed 8 months ago 2 comments

Bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.5.2 in /testbed

mar4uk/opentelemetry-collector-contrib #16776

4.2.0 → 4.5.2 Minor PR

Closed 8 months ago 3 comments

build(deps): bump github.com/golang-jwt/jwt/v4 from 4.3.0 to 4.5.2

JeffroMF/cri-o #231

4.3.0 → 4.5.2 Minor PR

Closed 8 months ago 3 comments

Bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.5.2 in /cmd/oteltestbedcol

mar4uk/opentelemetry-collector-contrib #16775

4.2.0 → 4.5.2 Minor PR

Closed 8 months ago 3 comments

Bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.5.2 in /exporter/prometheusexporter

mar4uk/opentelemetry-collector-contrib #16774

4.2.0 → 4.5.2 Minor PR

Closed 8 months ago 3 comments

Bump the go_modules group across 2 directories with 15 updates

Manny27nyc/grafana #4

4.0.0 → 4.5.1 Minor PR

Closed 8 months ago 3 comments

chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1

jenkins-x/lighthouse #1626

4.4.2 → 4.5.1 Minor PR

Closed 11 months ago 4 comments

Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1

turbot/steampipe-plugin-trivy #61

4.4.2 → 4.5.1 Minor PR

Closed 12 months ago 2 comments

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.1 in /cmd/configschema

mar4uk/opentelemetry-collector-contrib #16187

4.4.3 → 4.5.1 Minor PR

Closed 12 months ago 4 comments

build(deps): bump github.com/golang-jwt/jwt/v4 from 4.2.0 to 4.5.1 in /rollouts

kptdev/kpt #4175

4.2.0 → 4.5.1 Minor PR

Closed 12 months ago 1 comment

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

LM4eu/quid #80

4.4.3 → 4.5.0 Minor PR

Closed over 2 years ago 1 comment

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

lockboxauth/lockbox-apid #23

4.4.3 → 4.5.0 Minor PR

Closed over 2 years ago

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

lockboxauth/lockbox-spoof #6

4.4.3 → 4.5.0 Minor PR

Closed over 2 years ago 1 comment

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

lockboxauth/sessions #11

4.4.3 → 4.5.0 Minor PR

Closed over 2 years ago

Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

lockboxauth/tokens #42

4.4.3 → 4.5.0 Minor PR

Closed over 2 years ago

Package Details

Name:	`github.com/golang-jwt/jwt/v4`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/golang-jwt/jwt/v4`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All golang Advisories

Package Information

Description:

Package jwt is a Go implementation of JSON Web Tokens: http://self-issued.info/docs/draft-jones-json-web-token.html See README.md for more info.

Repository:	https://github.com/golang-jwt/jwt
Homepage:	https://github.com/golang-jwt/jwt
Latest Release:	`v4.5.2` 8 months ago
Dependent Repos:	22,852
Dependent Packages:	15,582
Ranking:	Top 0.0419% by dependent repos Top 0.0195% by dependent pkgs

PR Status

Open 271 (46.4%)

Merged 105 (18.0%)

Closed 150 (25.7%)

PR Types

Minor 101 (17.3%)

Patch 425 (72.8%)