Recordsgolanggithub.com/golang-jwt/jwt/v5failure issue
Failure signature
PROJECT_TEST Evidence gap ×2
Evidence quality: legacy-evidence-incomplete · First recorded: 2026-09-08 · Last seen: 2026-09-08
github.com/golang-jwt/jwt/v5.Parser.ParseUnverified jwt.ClaimStrings jwt.ClaimsValidator jwt.MarshalSingleStringAsArray jwt.Parse jwt.ParseWithClaims jwt.WithAllAudiences jwt.WithAudience jwt.WithExpirationRequired
Where it was measured
PASS means the release recorded a passing observation at PROJECT_TEST and no record of this failure. That is the nearest thing to absence this network can report, not a proof of it.
Where it reproduced
- executionContext=go · os=linux · runtime=go@1.26 ×2 2026-09-08 → 2026-09-08
Nearest known PASS/FAIL boundaries
The two adjacent releases the verdict changes across. Releases nothing measured do not close the gap; they are counted instead.
-
Last failing release v5.2.2 → first passing release v5.3.0
Both trees resolved every dependency to the same version. Nothing here moved.
-
Last passing release v5.3.0 → first failing release v5.3.1
Both trees resolved every dependency to the same version. Nothing here moved.
Evidence gaps
- The evidence for this failure was not preserved, so it has no established cause. Its stored hash is provenance, not an identity.
- No failure domain was inferred for this failure.
Published answers for the affected releases
- github.com/golang-jwt/jwt/v5 v5.3.1: Validate single and multiple token audiences using WithAudience, WithAllAudiences, and ClaimStrings in jwt/v5 This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWjwt.WithAudiencejwt.WithAllAudiencesjwt.ClaimStringsjwt.ParseWithClaimsgo MIT-0 · 2026-08-17
- github.com/golang-jwt/jwt/v5 v5.3.1: Enforce custom validation and require expiration checks during jwt/v5 token parsing This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWjwt.ParseWithClaimsjwt.ClaimsValidatorjwt.WithExpirationRequiredgo MIT-0 · 2026-08-17
- github.com/golang-jwt/jwt/v5 v5.2.2: ParseUnverified returns nil parts when given a token string with extra segment delimiters This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. HOWgithub.com/golang-jwt/jwt/v5.Parser.ParseUnverifiedgo MIT-0 · 2026-08-17