Package
influxd-2.7-bitnami-compat
Component
github.com/golang-jwt/jwt
Latest update
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
CVE-2025-30204 impacts applications that use the parse.ParseUnverified function. This function is designed to extract values from tokens without validating their signatures. However, InfluxDB is not affected by this vulnerability as it does not utilize the parse.ParseUnverified function.
Status
Impact
Govulncheck found vulnerable symbols in Go binaries at the following locations: in influxd-2.7-2.7.11-r44.apk, at usr/bin/influxd, usr/bin/influxd.
Status
Status
Impact
The dependency causing this CVE, golang-jwt/jwt v3.2.1, is brought in via the project's main go.mod. Due to functional changes required to move away from v3 to v4/v5, upstream maintainers are required to implement.
Status
Impact
The dependency causing this CVE, golang-jwt/jwt v3.2.1, is brought in via the project's main go.mod. Due to functional changes required to move away from v3 to v4/v5, upstream maintainers are required to implement.
Status