StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oxynozeta/kubernetes-tagger:1.3.0a153c386f5af
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
github.com/sirupsen/logrus@v1.5.0
1.8.3
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
github.com/sirupsen/logrus@v1.5.0
1.8.3
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
github.com/sirupsen/logrus@v1.5.0
1.8.3
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
phntom/mindav:0.1.7-kix35695f546abbb
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
photoprism/photoprism:220629-jammy2954334adbda
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
github.com/sirupsen/logrus@v1.5.0
1.8.3
1
polyaxon/training-operator:2.1.0b5b29deaec9a
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
github.com/sirupsen/logrus@v1.5.0
1.8.3
1
pozetroninc/rethinkdb-cluster:v2.4.16b06a098f994
github.com/sirupsen/logrus@v1.0.6
1.8.3
1
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
projecthami/volcano-vgpu-device-plugin:v1.9.40c94118d1d98
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
qoveryrd/digital-mobius:0.1.4b30a9398a83c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quiq/docker-registry-ui:0.9.491281da47036
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
qumine/ingress-controller:v0.8.5f2c8a2148381
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
qumine/minecraft-server:v0.1.15c0b650d51132
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
rancher/hardened-calico:v3.13.36d2cd61a338b
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
rclone/rclone:1.63.008e1af3c8814
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
rclone/rclone:1.57.01e6eeabddc01
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
rclone/rclone:1.56.0f2fc45c8bc57
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
reportportal/service-index:5.0.112b27a2d7a87d
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ribbybibby/s3-exporter:v0.5.0998184c51a00
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
robustadev/kubewatch:v2.9.00457a51e36e8
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
rookout/k8s-operator:latest0d083f3ef1a7
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
seafileltd/seafile-mc:9.0.106693911bcc40
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
seafileltd/seafile-mc:10.0.170628f29c663
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
seafileltd/seafile-mc:9.0.97ac833196f60
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
semitechnologies/weaviate:1.19.17a00d226f063
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
sikalabs/slu:v0.34.0fdc0c6711add
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
slamdev/flux-notifier:v0.0.8b173d809132d
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/sirupsen/logrus@v1.8.1
1.8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.