CVE-2025-22868

A vulnerability exists in the golang.org/x/oauth2/jws component, where an attacker can provide a maliciously malformed token that leads to unexpected memory consumption during the parsing process. This issue affects several products, including cri-tools , docker-stable , and opentelemetry-collect...