CVE-2025-4565
HighAdvisory
Published 16 Jun 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,781 indexed, latest versions
- Container images
- 171
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
protobuf-python has a potential Denial of Service issue
Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 171 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| protobufpypi | 3.5.1, 3.5.2, 3.6.1, 3.7.0+47 more | 4.25.8, 5.29.5, 6.31.1 | 160 |
| protobufdeb | 2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5+2 more | 2.6.1-1.3ubuntu0.1~esm4, 3.0.0-9.1ubuntu1.1+esm3, 3.6.1.3-2ubuntu5.2+esm2, 3.21.12-3+deb12u1 | 14 |
- OSV records
- GHSA-8qvm-5x2c-j2w7DEBIAN-CVE-2025-4565UBUNTU-CVE-2025-4565
- Also known as
- PYSEC-2026-1806, USN-7629-2
Charts affected
172 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| airflowairflow-helmVerified publisher | 8.9.0 | 1 of 4See more | 11,367 |
| rook-cephrookOfficialVerified publisher | 1.20.7 | 1 of 2See more | 1,447 |
| ceph-csi-cephfsceph-csiOfficialVerified publisher | 3.17.1 | 1 of 6See more | 4,061 |
| ceph-csi-rbdceph-csiOfficialVerified publisher | 3.17.1 | 1 of 6See more | 4,061 |
| netboxbootcVerified publisher | 4.1.1 | 1 of 4See more | 9,145 |
| milvusmilvus | 4.0.31 | 1 of 5See more | 32,259 |
| clearmlallegroaiOfficialVerified publisher | 7.15.0 | 1 of 4See more | 10,622 |
| ambassadordatawire | 6.9.5 | 1 of 2See more | 4,086 |
| emissary-ingressdatawire | 7.1.8-ea | 1 of 1See more | 4,918 |
| home-assistantgeek-cookbookVerified publisher | 13.5.0 | 1 of 1See more | 7,705 |
| redashredash | 4.2.0 | 1 of 3See more | 5,987 |
| homeassistantvolker-raschekVerified publisher | 0.2.3 | 1 of 1See more | 6,041 |
| edge-stackdatawire | 7.1.8-ea | 1 of 2See more | 5,173 |
| milvusmilvus-helm | 5.0.27 | 1 of 4See more | 10,670 |
| supersetcloudposse | 1.2.0 | 1 of 1See more | 5,851 |
| frigateblakeblackshear | 7.8.0 | 1 of 1See more | 3,004 |
| syftopenmined | 0.9.5 | 1 of 6See more | 17,245 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 6,168 |
| fadicetic | 0.3.1 | 1 of 25See more | 52,919 |
| kamu-api-serverkamuVerified publisher | 0.89.0 | 1 of 1See more | 6,307 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 96,941 |
| netboxstartechnicaVerified publisher | 5.1.0 | 1 of 4See more | 1,650 |
| alerta-webalerta-webVerified publisher | 0.1.12 | 1 of 2See more | 3,569 |
| convertigoconvertigoOfficialVerified publisher | 8.4.3 | 1 of 5See more | 17,404 |
| dyff-apidyff-apiVerified publisher | 0.57.4 | 1 of 1See more | 1,314 |
| edgelessdbedgelesssysVerified publisher | 0.3.2 | 1 of 1See more | 4,830 |
| openshift-secured-pgadmineximiaitVerified publisher | 0.2.0 | 1 of 2See more | 14,546 |
| esphomegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 3,717 |
| mlflowgetindataVerified publisher | 0.1.2 | 1 of 1See more | 2,452 |
| flagsmithone-acre-fundVerified publisher | 0.1.5 | 1 of 6See more | 6,868 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 1 of 9See more | 17,877 |
| psonoankra-chartsVerified publisher | 1.2.0 | 1 of 2See more | 2,388 |
| anteonanteonVerified publisher | 2.6.4 | 1 of 13See more | 22,202 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 10,730 |
| tensorflow-notebookcloudnativeapp | 0.1.2 | 1 of 1See more | 36,094 |
| pgbenchcloudnative-pgVerified publisher | 0.1.0 | 1 of 1See more | 2,713 |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 11,205 |
| datadogdatadog-test | 2.4.23 | 1 of 2See more | 4,568 |
| weblatedeliveryheroVerified publisher | 0.3.2 | 1 of 3See more | 7,984 |
| archerydoubanVerified publisher | 0.4.3 | 1 of 6See more | 5,853 |
| genesis-generatorethereum-helm-chartsVerified publisher | 0.2.3 | 1 of 2See more | 3,135 |
| obicogabe565Verified publisher | 0.6.0 | 1 of 3See more | 1,965 |
| deepstackgeek-cookbookVerified publisher | 1.5.2 | 1 of 2See more | 5,305 |
| huehue | 1.0.3 | 1 of 3See more | 12,397 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 15,712 |
| difykubeblocksVerified publisher | 0.5.1 | 1 of 5See more | 20,403 |
| mlflow-controllermlflow-deployment-controller | 0.1.8 | 2 of 2See more | 8,957 |
| mlflow-servermlflowserver | 0.1.9 | 1 of 3See more | 5,804 |
| iopsciencemeshVerified publisher | 0.4.0 | 1 of 2See more | 4,052 |
| smarter-demosmarterOfficialVerified publisher | 0.1.5 | 2 of 7See more | 45,832 |
Container images carrying it
171 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opea/ | 249afad3d268 | protobuf | 4.25.8 | 1 |
| opea/ | 257ae94709e9 | protobuf | 4.25.8 | 1 |
| opea/ | fe08165d7770 | protobuf | 4.25.8 | 1 |
| opencsghq/ | c36a5bac3cf0 | protobuf | 4.25.8 | 1 |
| openmined/ | b72f74a68b32 | protobuf | 5.29.5 | 1 |
| openthread/ | f307f59f6432 | protobuf | 3.0.0-9.1ubuntu1.1+esm3 | 1 |
| psono/ | 3b974b43ea03 | protobuf | 4.25.8 | 1 |
| redash/ | 00d813437db5 | protobuf | 4.25.8 | 1 |
| redash/ | 9392753c0376 | protobuf | 4.25.8 | 1 |
| robmarkcole/ | 410275726459 | protobuf | 4.25.8 | 1 |
| robotshop/ | 774b52c6180d | protobuf | 4.25.8 | 1 |
| rook/ | 2f970c425617 | protobuf | 4.25.8 | 1 |
| rook/ | 944a1dd70496 | protobuf | 4.25.8 | 1 |
| seldonio/ | 1d0da98a2d76 | protobuf | 4.25.8 | 1 |
| seldonio/ | 4e985d2006a8 | protobuf | 4.25.8 | 1 |
| skylenet/ | 210353ce7c89 | protobuf | 4.25.8 | 1 |
| softonic/ | a64d6c0e0ae5 | protobuf | 4.25.8 | 1 |
| sruthitanneru/ | e565ea454ffd | protobuf | 5.29.5 | 1 |
| t3nde/ | d2939e9a719b | protobuf | 4.25.8 | 1 |
| tachyongroup/ | 7e79b9000856 | protobuf | 4.25.8 | 1 |
| tachyongroup/ | f4f7fabe1037 | protobuf | 4.25.8 | 1 |
| tensorflow/ | 1e3172090703 | protobuf | 4.25.8 | 1 |
| timescale/ | e8d0a9cc3db5 | protobuf | 5.29.5 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | protobuf | 2.6.1-1.3ubuntu0.1~esm4 | 1 |
| twentycrm/ | 2f78405a78be | protobuf | 4.25.8 | 1 |
| voltha/ | c4e41e92f046 | protobuf | 4.25.8 | 1 |
| voltha/ | 37f80524c207 | protobuf | 4.25.8 | 1 |
| voltha/ | 9ee8c1f4428c | protobuf | 4.25.8 | 1 |
| voltha/ | 655c3048a602 | protobuf | 4.25.8 | 1 |
| voltha/ | ff596b62de59 | protobuf | 4.25.8 | 1 |
| wazuh/ | 1da5c38c6a78 | protobuf | 4.25.8 | 1 |
| wazuh/ | 21994f40e0da | protobuf | 4.25.8 | 1 |
| xeladock/ | 4baf531453f1 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 25d6975951f1 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 5f60c4988859 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 9bcfd2abc361 | protobuf | 4.25.8 | 1 |
| gcr.io/ | ec3ae9f6df47 | protobuf | 4.25.8 | 1 |
| gcr.io/ | a534a3170d03 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 22e3d0b486df | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 8d943799621b | protobuf | 4.25.8 | 1 |
| ghcr.io/ | b3b30d04b362 | protobuf | 4.25.8 | 1 |
| ghcr.io/ | a2be95de450c | protobuf | 4.25.8 | 1 |
| ghcr.io/ | bcd5b8d4c45c | protobuf | 3.0.0-9.1ubuntu1.1+esm3 | 1 |
| ghcr.io/ | 7e1d7a11a11a | protobuf | 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| ghcr.io/ | a5c1daef46c0 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 39d48995a5bd | protobuf | 4.25.8 | 1 |
| ghcr.io/ | 26c51e44d932 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | ec6d67fbedfa | protobuf | 4.25.8 | 1 |
| ghcr.io/ | feffc0b8227d | protobuf | 4.25.8 | 1 |
| ghcr.io/ | 379e31b8c751 | protobuf | 4.25.8 | 1 |