CVE-2025-65637
HighAdvisory
Published 4 Dec 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,787 indexed, latest versions
- Container images
- 787
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Logrus is vulnerable to DoS when using Entry.Writer()
Carried by container images the latest versions of 751 of 17,787 indexed charts deploy, on 787 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more | 1.8.3, 1.9.1, 1.9.3 | 787 |
| skopeorpm | 2:1.11.2-0.1.el9 | 2:1.11.4-0.1.el9_2.5 | 1 |
- OSV records
- GHSA-4f99-4q7p-p3ghRHSA-2026:13971
- Also known as
- GO-2025-4188
Charts affected
751 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
787 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| free5gc/ | 99e46b860efb | github.com/ | 1.8.3 | 2 |
| free5gc/ | dfe8c68c04b4 | github.com/ | 1.8.3 | 2 |
| free5gc/ | 60e38baa4b10 | github.com/ | 1.8.3 | 2 |
| free5gc/ | 2f68df062a50 | github.com/ | 1.8.3 | 2 |
| free5gc/ | c0783bcdcbdc | github.com/ | 1.8.3 | 2 |
| free5gc/ | b6b362a39fdd | github.com/ | 1.8.3 | 2 |
| free5gc/ | 9adeb18492cb | github.com/ | 1.9.1 | 2 |
| garugaru/ | 541852cafda5 | github.com/ | 1.8.3 | 2 |
| goelankit/ | 0d9a82dcf026 | github.com/ | 1.8.3 | 2 |
| governify/ | e83a17ba5038 | github.com/ | 1.8.3 | 2 |
| grafana/ | a136c6208aa3 | github.com/ | 1.8.3 | 2 |
| grafana/ | 057896e23443 | github.com/ | 1.8.3 | 2 |
| grafana/ | 42d3e6bc1865 | github.com/ | 1.8.3 | 2 |
| grafana/ | 511bc20bfcd1 | github.com/ | 1.8.3 | 2 |
| grafana/ | 922b3f412fdd | github.com/ | 1.8.3 | 2 |
| grafana/ | f9ef133793af | github.com/ | 1.8.3 | 2 |
| grafana/ | 46e88d390cd6 | github.com/ | 1.8.3 | 2 |
| hashicorp/ | e38576edcdfd | github.com/ | 1.8.3 | 2 |
| hashicorp/ | 538a3436398d | github.com/ | 1.8.3 | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | 1.8.3 | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ | 1.9.1 | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ | 1.9.1 | 2 |
| iomesh/ | 9b38b5c7a61d | github.com/ | 1.8.3 | 2 |
| istio/ | 757d28c24100 | github.com/ | 1.9.1 | 2 |
| istio/ | a78b7a165744 | github.com/ | 1.8.3 | 2 |
| jettech/ | c42098c8d855 | github.com/ | 1.8.3 | 2 |
| jettech/ | fb7c2cd46ccf | github.com/ | 1.8.3 | 2 |
| k0sproject/ | f04635825d51 | github.com/ | 1.9.1 | 2 |
| kubespheredev/ | 23a03c9c381f | github.com/ | 1.8.3 | 2 |
| library/ | 44a366dd7724 | github.com/ | 1.8.3 | 2 |
| library/ | 7d5a6ae66572 | github.com/ | 1.8.3 | 2 |
| lightninglabs/ | f86bbec4dfb3 | github.com/ | 1.9.3 | 2 |
| maxrocketinternet/ | 1a281b76efa3 | github.com/ | 1.8.3 | 2 |
| mesosphere/ | 073db43d0b8b | github.com/ | 1.8.3 | 2 |
| oliver006/ | 4af75e9f16f6 | github.com/ | 1.8.3 | 2 |
| openebs/ | f6c18b0f8c8a | github.com/ | 1.8.3 | 2 |
| oryd/ | d06fc5845f63 | github.com/ | 1.9.1 | 2 |
| oryd/ | e8cb9b79a89c | github.com/ | 1.9.1 | 2 |
| passbolt/ | 655547e17263 | github.com/ | 1.8.3 | 2 |
| place1/ | 2b2f3ea80ed6 | github.com/ | 1.8.3 | 2 |
| prom/ | 8176adea328e | github.com/ | 1.8.3 | 2 |
| prom/ | d43417c260e5 | github.com/ | 1.8.3 | 2 |
| qingcloud/ | 4cd5366a9f51 | github.com/ | 1.8.3 | 2 |
| rancher/ | 9380f5dbae9a | github.com/ | 1.9.1 | 2 |
| rancher/ | 12889bbcd1e8 | github.com/ | 1.9.1 | 2 |
| statping/ | e874da513a5c | github.com/ | 1.8.3 | 2 |
| streamnative/ | 0e6d7aa3ef32 | github.com/ | 1.9.1 | 2 |
| temporalio/ | c0a44c26397b | github.com/ | 1.9.1 | 2 |
| thomasnyambati/ | 1e18a0944ceb | github.com/ | 1.8.3 | 2 |
| thoughtmachine/ | c6065ba55c72 | github.com/ | 1.9.1 | 2 |