CVE-2025-4565
HighAdvisory
Published 16 Jun 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,781 indexed, latest versions
- Container images
- 171
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
protobuf-python has a potential Denial of Service issue
Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 171 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| protobufpypi | 3.5.1, 3.5.2, 3.6.1, 3.7.0+47 more | 4.25.8, 5.29.5, 6.31.1 | 160 |
| protobufdeb | 2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5+2 more | 2.6.1-1.3ubuntu0.1~esm4, 3.0.0-9.1ubuntu1.1+esm3, 3.6.1.3-2ubuntu5.2+esm2, 3.21.12-3+deb12u1 | 14 |
- OSV records
- GHSA-8qvm-5x2c-j2w7DEBIAN-CVE-2025-4565UBUNTU-CVE-2025-4565
- Also known as
- PYSEC-2026-1806, USN-7629-2
Charts affected
172 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 11,367 |
| rook-cephrookOfficialVerified publisher | 1.20.7 | 1 of 2See more | 1,447 |
| ceph-csi-cephfsceph-csiOfficialVerified publisher | 3.17.1 | 1 of 6See more | 4,061 |
| ceph-csi-rbdceph-csiOfficialVerified publisher | 3.17.1 | 1 of 6See more | 4,061 |
| netboxbootcVerified publisher | 4.1.1 | 1 of 4See more | 9,145 |
| milvusmilvus | 4.0.31 | 1 of 5See more | 32,259 |
| clearmlallegroaiOfficialVerified publisher | 7.15.0 | 1 of 4See more | 10,622 |
| ambassadordatawire | 6.9.5 | 1 of 2See more | 4,086 |
| emissary-ingressdatawire | 7.1.8-ea | 1 of 1See more | 4,918 |
| home-assistantgeek-cookbookVerified publisher | 13.5.0 | 1 of 1See more | 7,705 |
| redashredash | 4.2.0 | 1 of 3See more | 5,987 |
| homeassistantvolker-raschekVerified publisher | 0.2.3 | 1 of 1See more | 6,041 |
| edge-stackdatawire | 7.1.8-ea | 1 of 2See more | 5,173 |
| milvusmilvus-helm | 5.0.27 | 1 of 4See more | 10,670 |
| supersetcloudposse | 1.2.0 | 1 of 1See more | 5,851 |
| frigateblakeblackshear | 7.8.0 | 1 of 1See more | 3,004 |
| syftopenmined | 0.9.5 | 1 of 6See more | 17,245 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 6,168 |
| fadicetic | 0.3.1 | 1 of 25See more | 52,919 |
| kamu-api-serverkamuVerified publisher | 0.89.0 | 1 of 1See more | 6,307 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 96,941 |
| netboxstartechnicaVerified publisher | 5.1.0 | 1 of 4See more | 1,650 |
| alerta-webalerta-webVerified publisher | 0.1.12 | 1 of 2See more | 3,569 |
| convertigoconvertigoOfficialVerified publisher | 8.4.3 | 1 of 5See more | 17,404 |
| dyff-apidyff-apiVerified publisher | 0.57.4 | 1 of 1See more | 1,314 |
| edgelessdbedgelesssysVerified publisher | 0.3.2 | 1 of 1See more | 4,830 |
| openshift-secured-pgadmineximiaitVerified publisher | 0.2.0 | 1 of 2See more | 14,546 |
| esphomegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 3,717 |
| mlflowgetindataVerified publisher | 0.1.2 | 1 of 1See more | 2,452 |
| flagsmithone-acre-fundVerified publisher | 0.1.5 | 1 of 6See more | 6,868 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 1 of 9See more | 17,877 |
| psonoankra-chartsVerified publisher | 1.2.0 | 1 of 2See more | 2,388 |
| anteonanteonVerified publisher | 2.6.4 | 1 of 13See more | 22,202 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 10,730 |
| tensorflow-notebookcloudnativeapp | 0.1.2 | 1 of 1See more | 36,094 |
| pgbenchcloudnative-pgVerified publisher | 0.1.0 | 1 of 1See more | 2,713 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 11,205 |
| datadogdatadog-test | 2.4.23 | 1 of 2See more | 4,568 |
| weblatedeliveryheroVerified publisher | 0.3.2 | 1 of 3See more | 7,984 |
| archerydoubanVerified publisher | 0.4.3 | 1 of 6See more | 5,853 |
| genesis-generatorethereum-helm-chartsVerified publisher | 0.2.3 | 1 of 2See more | 3,135 |
| obicogabe565Verified publisher | 0.6.0 | 1 of 3See more | 1,965 |
| deepstackgeek-cookbookVerified publisher | 1.5.2 | 1 of 2See more | 5,305 |
| huehue | 1.0.3 | 1 of 3See more | 12,397 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 15,712 |
| difykubeblocksVerified publisher | 0.5.1 | 1 of 5See more | 20,403 |
| mlflow-controllermlflow-deployment-controller | 0.1.8 | 2 of 2See more | 8,957 |
| mlflow-servermlflowserver | 0.1.9 | 1 of 3See more | 5,804 |
| iopsciencemeshVerified publisher | 0.4.0 | 1 of 2See more | 4,052 |
| smarter-demosmarterOfficialVerified publisher | 0.1.5 | 2 of 7See more | 45,832 |
Container images carrying it
171 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dpage/ | 52cb72a9e3da | protobuf | 6.31.1 | 1 |
| dpage/ | 561c1f8f99f2 | protobuf | 5.29.5 | 1 |
| dysnix/ | 19951e3e7a32 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | 3cc1d94cfe96 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | b433c2b9f5dc | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | d582d39208c7 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | 8ed2df4ca692 | protobuf | 4.25.8 | 1 |
| esphome/ | 3f51ec10e823 | protobuf | 4.25.8 | 1 |
| esphome/ | 9ab8cc88b28c | protobuf | 5.29.5 | 1 |
| esphome/ | b2c6322700ac | protobuf | 4.25.8 | 1 |
| esphome/ | def8b6e4f517 | protobuf | 6.31.1 | 1 |
| evk02/ | ef6ff257ef35 | protobuf | 4.25.8 | 1 |
| fiware/ | 29456835bb2c | protobuf protobuf | 4.25.8 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| flagsmith/ | fd58556339a4 | protobuf | 4.25.8 | 1 |
| galaxy/ | e5c265fe9fcd | protobuf | 4.25.8 | 1 |
| gethue/ | 11b649636e68 | protobuf | 4.25.8 | 1 |
| gethue/ | 5702b2c37ff9 | protobuf | 4.25.8 | 1 |
| gethue/ | 7d5c1b9f8a79 | protobuf | 4.25.8 | 1 |
| gluufederation/ | 1a1128b28b95 | protobuf | 4.25.8 | 1 |
| goofball222/ | 43c0743701d4 | protobuf | 4.25.8 | 1 |
| goofball222/ | 7bf26032dfce | protobuf | 4.25.8 | 1 |
| guillh/ | 4fb99dbc32b2 | protobuf | 5.29.5 | 1 |
| hayk96/ | 86377705e9e3 | protobuf | 4.25.8 | 1 |
| hhyo/ | 1aa41843419e | protobuf | 4.25.8 | 1 |
| homeassistant/ | 021e2afc6e57 | protobuf | 4.25.8 | 1 |
| homeassistant/ | 8d000332b09b | protobuf | 4.25.8 | 1 |
| improwised/ | 97280b55cbd4 | protobuf | 4.25.8 | 1 |
| intel/ | 591a9db4a427 | protobuf | 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| iosifache/ | 85df3f04b5da | protobuf | 4.25.8 | 1 |
| jordan/ | f75025fe8ea8 | protobuf | 3.21.12-3+deb12u1 | 1 |
| kelvinsp/ | cd33e6db2a59 | protobuf | 4.25.8 | 1 |
| langgenius/ | 066035f93856 | protobuf | 4.25.8 | 1 |
| langgenius/ | fca918260dd6 | protobuf | 4.25.8 | 1 |
| linuxserver/ | 938810eca3d3 | protobuf | 4.25.8 | 1 |
| lnbitsdocker/ | 26fae6327477 | protobuf | 4.25.8 | 1 |
| lnbitsdocker/ | a11aaa6d2b21 | protobuf | 4.25.8 | 1 |
| lncm/ | bca14d04397d | protobuf | 4.25.8 | 1 |
| mondata/ | 6f94c6caf8bf | protobuf | 4.25.8 | 1 |
| mozilla/ | 016162bf39d8 | protobuf | 4.25.8 | 1 |
| netboxcommunity/ | 3d652dca5351 | protobuf | 4.25.8 | 1 |
| netboxcommunity/ | 9bf83b350a89 | protobuf | 4.25.8 | 1 |
| omecproject/ | d109a8e57e71 | protobuf | 4.25.8 | 1 |
| opea/ | 25dd26d9cd09 | protobuf | 4.25.8 | 1 |
| opea/ | 38c51b791efa | protobuf | 4.25.8 | 1 |
| opea/ | 58f91683892d | protobuf | 4.25.8 | 1 |
| opea/ | e2436483b73d | protobuf | 4.25.8 | 1 |
| opea/ | 3eaa91849512 | protobuf | 4.25.8 | 1 |
| opea/ | 262c6048aab8 | protobuf | 4.25.8 | 1 |
| opea/ | f68bec6a1271 | protobuf | 5.29.5 | 1 |
| opea/ | 02f9e8fa5d71 | protobuf | 4.25.8 | 1 |