StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/itakurah/kubernetes-event-exporter:v1.78abb52b66557
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/k8s-at-home/gateway-admision-controller:v2.0.00d6d0df98fe4
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/k8s-at-home/gateway-admision-controller:v3.5.0175512bb3f61
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/sirupsen/logrus@v1.9.2
1.9.3
1
ghcr.io/loft-sh/license-server:0.6.069ce001bb4b0
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/netsoc/shhd:0.1.60bb44992b62c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ghcr.io/openappsec/smartsync:latest580d68c50cc7
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/sirupsen/logrus@v1.8.1
1.8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.