RHSA-2025:7425 — Red Hat Security Advisory: osbuild-composer security update
A flaw was found in the golang-jwt implementation of JSON Web Tokens (JWT). In affected versions, a malicious request with specially crafted Authorization header data may cause excessive resource consumption on the host system, significant performance degradation, or an application crash, leading to denial of service.
CERT24