influxd-2.7
Chainguard
7.5
CVSS V3
Status
Justification
Impact
CVE-2025-30204 impacts applications that use the parse.ParseUnverified function. This function is designed to extract values from tokens without validating their signatures. However, InfluxDB is not affected by this vulnerability as it does not utilize the parse.ParseUnverified function.
Status
Impact
Govulncheck found vulnerable symbols in Go binaries at the following locations: in influxd-2.7-2.7.11-r44.apk, at usr/bin/influxd, usr/bin/influxd.
Status
Status
Impact
The dependency causing this CVE, golang-jwt/jwt v3.2.1, is brought in via the project's main go.mod. Due to functional changes required to move away from v3 to v4/v5, upstream maintainers are required to implement.