CVE-2025-4565
HighAdvisory
Published 16 Jun 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.003
- 18th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 172
- of 17,781 indexed, latest versions
- Container images
- 171
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
protobuf-python has a potential Denial of Service issue
Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 171 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| protobufpypi | 3.5.1, 3.5.2, 3.6.1, 3.7.0+47 more | 4.25.8, 5.29.5, 6.31.1 | 160 |
| protobufdeb | 2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5+2 more | 2.6.1-1.3ubuntu0.1~esm4, 3.0.0-9.1ubuntu1.1+esm3, 3.6.1.3-2ubuntu5.2+esm2, 3.21.12-3+deb12u1 | 14 |
- OSV records
- GHSA-8qvm-5x2c-j2w7DEBIAN-CVE-2025-4565UBUNTU-CVE-2025-4565
- Also known as
- PYSEC-2026-1806, USN-7629-2
Charts affected
172 by stars
Container images carrying it
171 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opea/ | 249afad3d268 | protobuf | 4.25.8 | 1 |
| opea/ | 257ae94709e9 | protobuf | 4.25.8 | 1 |
| opea/ | fe08165d7770 | protobuf | 4.25.8 | 1 |
| opencsghq/ | c36a5bac3cf0 | protobuf | 4.25.8 | 1 |
| openmined/ | b72f74a68b32 | protobuf | 5.29.5 | 1 |
| openthread/ | f307f59f6432 | protobuf | 3.0.0-9.1ubuntu1.1+esm3 | 1 |
| psono/ | 3b974b43ea03 | protobuf | 4.25.8 | 1 |
| redash/ | 00d813437db5 | protobuf | 4.25.8 | 1 |
| redash/ | 9392753c0376 | protobuf | 4.25.8 | 1 |
| robmarkcole/ | 410275726459 | protobuf | 4.25.8 | 1 |
| robotshop/ | 774b52c6180d | protobuf | 4.25.8 | 1 |
| rook/ | 2f970c425617 | protobuf | 4.25.8 | 1 |
| rook/ | 944a1dd70496 | protobuf | 4.25.8 | 1 |
| seldonio/ | 1d0da98a2d76 | protobuf | 4.25.8 | 1 |
| seldonio/ | 4e985d2006a8 | protobuf | 4.25.8 | 1 |
| skylenet/ | 210353ce7c89 | protobuf | 4.25.8 | 1 |
| softonic/ | a64d6c0e0ae5 | protobuf | 4.25.8 | 1 |
| sruthitanneru/ | e565ea454ffd | protobuf | 5.29.5 | 1 |
| t3nde/ | d2939e9a719b | protobuf | 4.25.8 | 1 |
| tachyongroup/ | 7e79b9000856 | protobuf | 4.25.8 | 1 |
| tachyongroup/ | f4f7fabe1037 | protobuf | 4.25.8 | 1 |
| tensorflow/ | 1e3172090703 | protobuf | 4.25.8 | 1 |
| timescale/ | e8d0a9cc3db5 | protobuf | 5.29.5 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | protobuf | 2.6.1-1.3ubuntu0.1~esm4 | 1 |
| twentycrm/ | 2f78405a78be | protobuf | 4.25.8 | 1 |
| voltha/ | c4e41e92f046 | protobuf | 4.25.8 | 1 |
| voltha/ | 37f80524c207 | protobuf | 4.25.8 | 1 |
| voltha/ | 9ee8c1f4428c | protobuf | 4.25.8 | 1 |
| voltha/ | 655c3048a602 | protobuf | 4.25.8 | 1 |
| voltha/ | ff596b62de59 | protobuf | 4.25.8 | 1 |
| wazuh/ | 1da5c38c6a78 | protobuf | 4.25.8 | 1 |
| wazuh/ | 21994f40e0da | protobuf | 4.25.8 | 1 |
| xeladock/ | 4baf531453f1 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 25d6975951f1 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 5f60c4988859 | protobuf | 4.25.8 | 1 |
| gcr.io/ | 9bcfd2abc361 | protobuf | 4.25.8 | 1 |
| gcr.io/ | ec3ae9f6df47 | protobuf | 4.25.8 | 1 |
| gcr.io/ | a534a3170d03 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 22e3d0b486df | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 8d943799621b | protobuf | 4.25.8 | 1 |
| ghcr.io/ | b3b30d04b362 | protobuf | 4.25.8 | 1 |
| ghcr.io/ | a2be95de450c | protobuf | 4.25.8 | 1 |
| ghcr.io/ | bcd5b8d4c45c | protobuf | 3.0.0-9.1ubuntu1.1+esm3 | 1 |
| ghcr.io/ | 7e1d7a11a11a | protobuf | 3.6.1.3-2ubuntu5.2+esm2 | 1 |
| ghcr.io/ | a5c1daef46c0 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | 39d48995a5bd | protobuf | 4.25.8 | 1 |
| ghcr.io/ | 26c51e44d932 | protobuf | 5.29.5 | 1 |
| ghcr.io/ | ec6d67fbedfa | protobuf | 4.25.8 | 1 |
| ghcr.io/ | feffc0b8227d | protobuf | 4.25.8 | 1 |
| ghcr.io/ | 379e31b8c751 | protobuf | 4.25.8 | 1 |