AZL-57422 CVE-2025-22868 affecting package packer for versions less than 1.9.5-10

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57315 CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57309 CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57467 CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-13

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57338 CVE-2025-22868 affecting package influxdb for versions less than 2.7.5-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57356 CVE-2025-22868 affecting package containerized-data-importer for versions less than 1.57.0-13

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57312 CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57363 CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

DEBIAN-CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57339 CVE-2025-22868 affecting package packer for versions less than 1.9.5-6

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57462 CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57450 CVE-2025-22868 affecting package blobfuse2 for versions less than 2.1.2-8

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

UBUNTU-CVE-2025-22868

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2025-22868

CVE-2025-22868 is confirmed across connected feeds as a memory‑consumption DoS in token parsing caused by a malformed token in a Go oauth2/token path. The Astra Linux bulletin ties this to golang-golang-x-oauth2, and CBLMariner notes affected moby-engine versions below 25.0.3-11 with a patched re...

Input validation

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...

CVE-2020-36564 Improper input validation in github.com/justinas/nosurf

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid...