Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

🗓️ 30 Jan 2025 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 1 Views

Poor error handling documentation in ParseWithClaims can cause dangerous issues in Golang jwt.

Reporter	Title	Published	Views	Family All 386
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in golang-jwt [CVE-2024-51744]	27 Feb 202517:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager.	15 Apr 202503:26	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	14 Mar 202510:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party libraries which is vulnerable to multiple CVEs	3 Nov 202508:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in QRadar Suite Software	13 Mar 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	27 Feb 202609:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Aymmetric Resource Consumption and Improper Handling of Exceptions in Grafana (CVE-2024-51744 CVE-2025-30204)	29 Jul 202520:59	–	ibm

Vulners

Node

microsoft cbl2_telegraf_1.29.4-15Range<1.29.4-14

OR

microsoft cbl2_application-gateway-kubernetes-ingress_1.4.0-25Range<1.4.0-25

OR

microsoft cbl2_etcd_3.5.21-1Range<3.5.21-1

OR

microsoft cbl2_application-gateway-kubernetes-ingress_1.4.0-25Range<1.4.0-25

OR

microsoft cbl2_telegraf_1.29.4-15Range<1.29.4-14

OR

microsoft cbl2_prometheus_2.37.9-4Range<2.37.9-4

OR

microsoft cbl2_dcos-cli_1.2.0-21Range<1.2.0-21

OR

microsoft cbl2_azcopy_10.25.1-5Range<10.25.1-4

OR

microsoft cbl2_cert-manager_1.11.2-22Range<1.11.2-22

OR

microsoft cbl2_jx_3.2.236-21Range<3.2.236-21

OR

microsoft cbl2_cf-cli_8.4.0-24Range<8.4.0-24

OR

microsoft cbl2_application-gateway-kubernetes-ingress_1.4.0-25Range<1.4.0-25

OR

microsoft cbl2_rook_1.6.2-26Range<1.6.2-26

OR

microsoft azl3_etcd_3.5.12-2Range<3.5.18-1

OR

microsoft azl3_kubernetes_1.30.10-7Range<1.30.10-5

OR

microsoft azl3_keda_2.14.1-7Range<2.14.1-6

OR

microsoft azl3_application-gateway-kubernetes-ingress_1.7.2-3Range<1.7.7-1

OR

microsoft azl3_packer_1.9.5-9Range<1.9.5-8

OR

microsoft cbl2_kubernetes_1.28.4-17Range<1.28.4-17

OR

microsoft cbl2_kubevirt_0.59.0-28Range<0.59.0-27

OR

microsoft cbl2_keda_2.4.0-29Range<2.4.0-29

OR

microsoft cbl2_etcd_3.5.12-6Range<3.5.21-1

OR

microsoft cbl2_packer_1.9.5-12Range<1.9.5-11

OR

microsoft cbl2_coredns_1.11.1-18Range<1.11.1-18

OR

microsoft cbl2_kube-vip-cloud-provider_0.0.2-22Range<0.0.2-22

OR

microsoft cbl2_influxdb_2.6.1-22Range<2.6.1-22

OR

microsoft cbl2_moby-engine_24.0.9-17Range<24.0.9-17

OR

microsoft azl3_moby-engine_25.0.3-13Range<25.0.3-13

OR

microsoft azl3_jx_3.10.116-2Range<3.10.182-1

OR

microsoft azl3_telegraf_1.31.0-10Range<1.31.0-6

OR

microsoft azl3_influxdb_2.7.5-5Range<2.7.5-3

OR

microsoft azl3_flannel_0.24.2-14Range<0.24.2-13

OR

microsoft azl3_cert-manager_1.12.13-2Range<1.12.15-1

OR

microsoft azl3_coredns_1.11.1-4Range<1.11.4-1

OR

microsoft azl3_coredns_1.11.4-1Range<1.11.4-1

OR

microsoft azl3_azcopy_10.25.1-4Range<10.25.1-4

OR

microsoft azl3_cert-manager_1.12.15-1Range<1.12.15-1

OR

microsoft azl3_flannel_0.24.2-13Range<0.24.2-13

OR

microsoft azl3_packer_1.9.5-8Range<1.9.5-8

OR

microsoft azl3_influxdb_2.7.5-3Range<2.7.5-3

OR

microsoft azl3_application-gateway-kubernetes-ingress_1.7.7-1Range<1.7.7-1

OR

microsoft azl3_dcos-cli_1.2.0-18Range<1.2.0-18

OR

microsoft azl3_keda_2.14.1-6Range<2.14.1-6

OR

microsoft azl3_kubernetes_1.30.10-5Range<1.30.10-5

OR

microsoft azl3_telegraf_1.31.0-6Range<1.31.0-6

OR

microsoft azl3_prometheus_2.45.4-12Range<2.45.4-12

OR

microsoft azl3_jx_3.10.182-1Range<3.10.182-1

OR

microsoft azl3_etcd_3.5.18-1Range<3.5.18-1

OR

microsoft cbl2_packer_1.9.5-11Range<1.9.5-11

OR

microsoft cbl2_azcopy_10.25.1-4Range<10.25.1-4

OR

microsoft cbl2_kubevirt_0.59.0-27Range<0.59.0-27

OR

microsoft cbl2_telegraf_1.29.4-14Range<1.29.4-14

21 Feb 2026 10:42Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.13.1

EPSS0.0006

SSVC

ParseWithClaims Error handling Golang jwt Documentation quality