CVE-2025-4565
HighAdvisory
Published 16 Jun 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,781 indexed, latest versions
- Container images
- 171
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
protobuf-python has a potential Denial of Service issue
Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 171 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| protobufpypi | 3.5.1, 3.5.2, 3.6.1, 3.7.0+47 more | 4.25.8, 5.29.5, 6.31.1 | 160 |
| protobufdeb | 2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5+2 more | 2.6.1-1.3ubuntu0.1~esm4, 3.0.0-9.1ubuntu1.1+esm3, 3.6.1.3-2ubuntu5.2+esm2, 3.21.12-3+deb12u1 | 14 |
- OSV records
- GHSA-8qvm-5x2c-j2w7DEBIAN-CVE-2025-4565UBUNTU-CVE-2025-4565
- Also known as
- PYSEC-2026-1806, USN-7629-2
Charts affected
172 by stars
Container images carrying it
171 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dpage/ | 52cb72a9e3da | protobuf | 6.31.1 | 1 |
| dpage/ | 561c1f8f99f2 | protobuf | 5.29.5 | 1 |
| dysnix/ | 19951e3e7a32 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | 3cc1d94cfe96 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | b433c2b9f5dc | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | d582d39208c7 | protobuf | 4.25.8 | 1 |
| eclipseaerios/ | 8ed2df4ca692 | protobuf | 4.25.8 | 1 |
| esphome/ | 3f51ec10e823 | protobuf | 4.25.8 | 1 |
| esphome/ | 9ab8cc88b28c | protobuf | 5.29.5 | 1 |
| esphome/ | b2c6322700ac | protobuf | 4.25.8 | 1 |
| esphome/ | def8b6e4f517 | protobuf | 6.31.1 | 1 |
| evk02/ | ef6ff257ef35 | protobuf | 4.25.8 | 1 |
| fiware/ | 29456835bb2c | protobuf protobuf | 4.25.8 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| flagsmith/ | fd58556339a4 | protobuf | 4.25.8 | 1 |
| galaxy/ | e5c265fe9fcd | protobuf | 4.25.8 | 1 |
| gethue/ | 11b649636e68 | protobuf | 4.25.8 | 1 |
| gethue/ | 5702b2c37ff9 | protobuf | 4.25.8 | 1 |
| gethue/ | 7d5c1b9f8a79 | protobuf | 4.25.8 | 1 |
| gluufederation/ | 1a1128b28b95 | protobuf | 4.25.8 | 1 |
| goofball222/ | 43c0743701d4 | protobuf | 4.25.8 | 1 |
| goofball222/ | 7bf26032dfce | protobuf | 4.25.8 | 1 |
| guillh/ | 4fb99dbc32b2 | protobuf | 5.29.5 | 1 |
| hayk96/ | 86377705e9e3 | protobuf | 4.25.8 | 1 |
| hhyo/ | 1aa41843419e | protobuf | 4.25.8 | 1 |
| homeassistant/ | 021e2afc6e57 | protobuf | 4.25.8 | 1 |
| homeassistant/ | 8d000332b09b | protobuf | 4.25.8 | 1 |
| improwised/ | 97280b55cbd4 | protobuf | 4.25.8 | 1 |
| intel/ | 591a9db4a427 | protobuf | 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| iosifache/ | 85df3f04b5da | protobuf | 4.25.8 | 1 |
| jordan/ | f75025fe8ea8 | protobuf | 3.21.12-3+deb12u1 | 1 |
| kelvinsp/ | cd33e6db2a59 | protobuf | 4.25.8 | 1 |
| langgenius/ | 066035f93856 | protobuf | 4.25.8 | 1 |
| langgenius/ | fca918260dd6 | protobuf | 4.25.8 | 1 |
| linuxserver/ | 938810eca3d3 | protobuf | 4.25.8 | 1 |
| lnbitsdocker/ | 26fae6327477 | protobuf | 4.25.8 | 1 |
| lnbitsdocker/ | a11aaa6d2b21 | protobuf | 4.25.8 | 1 |
| lncm/ | bca14d04397d | protobuf | 4.25.8 | 1 |
| mondata/ | 6f94c6caf8bf | protobuf | 4.25.8 | 1 |
| mozilla/ | 016162bf39d8 | protobuf | 4.25.8 | 1 |
| netboxcommunity/ | 3d652dca5351 | protobuf | 4.25.8 | 1 |
| netboxcommunity/ | 9bf83b350a89 | protobuf | 4.25.8 | 1 |
| omecproject/ | d109a8e57e71 | protobuf | 4.25.8 | 1 |
| opea/ | 25dd26d9cd09 | protobuf | 4.25.8 | 1 |
| opea/ | 38c51b791efa | protobuf | 4.25.8 | 1 |
| opea/ | 58f91683892d | protobuf | 4.25.8 | 1 |
| opea/ | e2436483b73d | protobuf | 4.25.8 | 1 |
| opea/ | 3eaa91849512 | protobuf | 4.25.8 | 1 |
| opea/ | 262c6048aab8 | protobuf | 4.25.8 | 1 |
| opea/ | f68bec6a1271 | protobuf | 5.29.5 | 1 |
| opea/ | 02f9e8fa5d71 | protobuf | 4.25.8 | 1 |