StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wavefronthq/prometheus-storage-adapter:latestded77b38c7c6
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
webdevops/azure-janitor:24.9.02446baee7b69
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
zufardhiyaulhaq/devopsweekly:v2.1.046625567fb60
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
zufardhiyaulhaq/javascriptweekly:v2.1.086424bd0b2a4
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
zufardhiyaulhaq/nodejsweekly:v1.1.0306859a3f167
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator1e3db4f2eeed
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdb6ceff2aab4
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerbac158dfb0c7
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookd27b4495ccc3
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/angelnu/chirpstack-packet-multiplexer:latest0c84c2d71006
github.com/sirupsen/logrus@v1.4.1
1.8.3
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/sirupsen/logrus@v1.9.2
1.9.3
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
github.com/sirupsen/logrus@v1.9.0
1.9.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.