RHSA-2025:7407HighCVSS 7.5

Red Hat Security Advisory: opentelemetry-collector security update

Published
May 13, 2025
Last Modified
June 3, 2026

🔗 CVE IDs covered (4)

📋 Description

CVE-2025-22868 — golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws CVE-2025-27144 — go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-29786 — github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input CVE-2025-30204 — golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing

🔗 References (7)