CGA-78mw-w8jp-q98q

Published

Last updated

https://images.chainguard.dev/security/CGA-78mw-w8jp-q98q

Package

rancher-agent-2.12

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-30204
GHSA-mh63-6h87-95cp

Severity

7.5

High

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2025-30204
https://github.com/advisories/GHSA-mh63-6h87-95cp

Updates

Status

Pending upstream fix

Impact

The dependency causing this CVE, golang-jwt/jwt v3.2.1, is brought in via the project's main go.mod. Due to functional changes required to move away from v3 to v4/v5, upstream maintainers are required to do the necessary changes to the project code in order to fix this vulnerability.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-78mw-w8jp-q98q

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company