StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/lunarway/snyk_exporter:v1.11.155e5cc5aaa0a
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
quay.io/opstree/druid-exporter:v0.83f6d9885cfe2
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
quay.io/opstree/druid-exporter:v0.119f01c9c5c2e3
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/sirupsen/logrus@v1.8.1
skopeo@2:1.11.2-0.1.el9
1.8.3
2:1.11.4-0.1.el9_2.5
1
quay.io/redhat-developer/servicebinding-operator16286ac84ddd
github.com/sirupsen/logrus@v1.9.2
1.9.3
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
quay.io/uswitch/kiam:v4.0be3a5846922d
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator:0.0.1779454fea06c
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0549e71a6ca24
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
github.com/sirupsen/logrus@v1.9.0
1.9.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.