CVE-2025-30204 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/security/cve/CVE-2025-30204.html

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
rancher/rancher-agent:v2.12-head Rancher Prime v2.12-head usr/bin/agent github.com/golang-jwt/jwt@v3.2.1+incompatible HIGH affected
rancher/rancher:v2.12-head Rancher Prime v2.12-head usr/bin/rancher github.com/golang-jwt/jwt@v3.2.1+incompatible HIGH affected
rancher/rancher-agent:v2.12.15 Rancher Prime v2.12.15 usr/bin/agent github.com/golang-jwt/jwt@v3.2.1+incompatible HIGH affected
rancher/rancher:v2.12.15 Rancher Prime v2.12.15 usr/bin/rancher github.com/golang-jwt/jwt@v3.2.1+incompatible HIGH affected
rancher/azureserviceoperator:v2.11.0 Rancher Prime v2.13-head aso-controller github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH affected
rancher/azureserviceoperator:v2.11.0 Rancher Prime v2.13.11 aso-controller github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH affected
rancher/harvester-eventrouter:v1.8.3-rc1 Harvester v1.8-head usr/bin/eventrouter github.com/golang-jwt/jwt/v4@v4.2.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/harvester-eventrouter:v1.8.2 Harvester v1.8.2 usr/bin/eventrouter github.com/golang-jwt/jwt/v4@v4.2.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/machine:v0.15.0-rancher133.2 Rancher Prime v2.12-head usr/local/bin/rancher-machine github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 Rancher Prime v2.12-head bin/vsphere-cloud-controller-manager github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere:v1.32.2 Rancher Prime v2.12-head bin/vsphere-cloud-controller-manager github.com/golang-jwt/jwt/v4@v4.5.1 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-prometheus-prometheus:v3.2.1 Rancher Prime v2.12-head bin/prometheus github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-prometheus-prometheus:v3.2.1 Rancher Prime v2.12-head bin/promtool github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-thanos-thanos:v0.37.2 Rancher Prime v2.12-head bin/thanos github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/rancher:v2.12-head Rancher Prime v2.12-head usr/bin/rancher-machine github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/machine:v0.15.0-rancher133.2 Rancher Prime v2.12.15 usr/local/bin/rancher-machine github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere-cpi-release-manager:v1.30.1 Rancher Prime v2.12.15 bin/vsphere-cloud-controller-manager github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-cloud-provider-vsphere:v1.32.2 Rancher Prime v2.12.15 bin/vsphere-cloud-controller-manager github.com/golang-jwt/jwt/v4@v4.5.1 4.5.2 HIGH not affected vulnerable code not in execute path
rancher/mirrored-thanos-thanos:v0.37.2 Rancher Prime v2.12.15 bin/thanos github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/prom-prometheus:v3.2.1 Rancher Prime v2.12.15 bin/prometheus github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/prom-prometheus:v3.2.1 Rancher Prime v2.12.15 bin/promtool github.com/golang-jwt/jwt/v5@v5.2.1 5.2.2 HIGH not affected vulnerable code not in execute path
rancher/rancher:v2.12.15 Rancher Prime v2.12.15 usr/bin/rancher-machine github.com/golang-jwt/jwt/v4@v4.5.0 4.5.2 HIGH not affected vulnerable code not in execute path