StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/ckotzbauer/chekrf299baf467b5
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/decayofmind/kube-better-node:masterccd2ce03b682
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
github.com/sirupsen/logrus@v1.8.0
1.8.3
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/sirupsen/logrus@v1.9.0
1.9.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.