This vulnerability affects the golang-jwt library used in Red Hat OpenShift Data Foundation 4.18. It allows an attacker to send a malicious request with a specially crafted Authorization header that triggers excessive memory allocation during JWT header parsing. This asymmetric resource consumption (CWE-405) can cause high CPU and memory usage, potentially crashing the application or severely degrading performance, resulting in denial of service. The issue is tracked under CVE-2025-30204 and has a Red Hat CVSS v3 base score of 7.5 (high severity). Red Hat has not yet released a fix or mitigation and advises applying all previously released errata before updating. The vulnerability is documented in Red Hat advisory RHSA-2025:23916.

The vulnerability can cause denial of service through excessive resource consumption (CPU and memory) triggered by malicious JWT Authorization headers. This leads to significant performance degradation or application crashes in affected Red Hat OpenShift Data Foundation 4.18 deployments. There is no impact on confidentiality or integrity reported. No known exploits are currently active in the wild.

Red Hat Product Security currently does not recommend any specific mitigation for this vulnerability. Users should ensure all previously released errata relevant to their system are applied before updating. Monitor Red Hat advisories for future patches or mitigations. No workaround or temporary fix is provided at this time.