StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sosedoff/pgweb:latesta5256d416e2e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
springhack/frpc_ingress:latest4aceb821da88
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
stakater/k8s-cost-optimizer:v0.0.5450415ce1b4e
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
stakater/reloader:v1.0.15f4b87a8e56d4
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
stakater/whitelister:v0.0.1639107924063e
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
stakater/workshop-operator:v0.0.3897bf456cc97c
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
stashapp/stash:latest24dbd7607174
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
stubin87/tiny-api:v1.1.02e5c42e92ec8
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
tailwarden/komiser:3.1.103f68c8ae7993
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
tdengine/tdengine:3.0.2.24140a4021ddb
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
temporalio/admin-tools:1.22.4258958fe2ff2
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
temporalio/admin-tools:1.15.135034611d981
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
temporalio/admin-tools:1.22.0836af062af30
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
temporalio/server:1.26.21e2626efcbc1
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
temporalio/server:1.25.08a5798191dea
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
temporalio/server:1.22.0ddeebf8bad8f
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
temporalio/server:1.15.1e26758f5a1bf
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
thanosio/thanos:v0.19.088276fcd1491
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
thomseddon/traefik-forward-auth:269a2c985d2c5
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
thomseddon/traefik-forward-auth:latestb364aa6a4117
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
tobiasbp/db-backup:0.0.314bee6e33a26
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
traefik/mesh:v1.4.8cf071f3e165c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
traggo/server:0.2.3f1ced637510e
github.com/sirupsen/logrus@v1.4.1
1.8.3
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
treeverse/lakefs:0.69.0478f37a6cffc
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
github.com/sirupsen/logrus@v1.8.0
1.8.3
1
ubercadence/server:0.23.22ac5491d13bb
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
vearch/vearch:3.3.40768af33f9d9
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
velero/velero:v1.9.0277fbfaf8dcf
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
velero/velero:v1.8.18d784580931c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
vmware/kube-fluentd-operator:latestf028c138a5f4
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
voidxmh/golang:1.19-alpine-dev423c6195fab2
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
voltha/bbsim:1.16.7d90403d58016
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
vultr/vultr-csi:v0.3.041d26735d437
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
wallarm/kong-kubernetes-ingress-controller:2.8b55ff6cecbd5
github.com/sirupsen/logrus@v1.9.0
1.9.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.