{"id":"CLSA-2025-1746655592","summary":"grafana: Fix of CVE-2025-30204","details":"- CVE-2025-30204: update golang-jwt/jwt to v4.5.2 to prevent a vulnerability that could lead\n  to excessive memory allocation when parsing untrusted JWT tokens using ParseUnverified","modified":"2026-06-01T00:30:43.299567616Z","published":"2025-05-07T22:06:38Z","upstream":["CVE-2025-30204"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1746655592.html"}],"affected":[{"package":{"name":"grafana","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/grafana?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.9-4.el9_2.alma.1.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1746655592.json"}}],"schema_version":"1.7.5"}