StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/riotkit-org/backup-maker-controller:v0.1.262370545ba3d
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/cilium/tetragon-operator:v0.8.34ab8e6604204
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/coreos/etcd:v3.5.11842975891182
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/sirupsen/logrus@v1.8.0
1.8.3
1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/fiware/ishare-auth-provider:0.4.3158108f70f95
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.