CVE-2025-65637
HighAdvisory
Published 4 Dec 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,787 indexed, latest versions
- Container images
- 787
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Logrus is vulnerable to DoS when using Entry.Writer()
Carried by container images the latest versions of 751 of 17,787 indexed charts deploy, on 787 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more | 1.8.3, 1.9.1, 1.9.3 | 787 |
| skopeorpm | 2:1.11.2-0.1.el9 | 2:1.11.4-0.1.el9_2.5 | 1 |
- OSV records
- GHSA-4f99-4q7p-p3ghRHSA-2026:13971
- Also known as
- GO-2025-4188
Charts affected
751 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
787 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| datawire/ | 07f8fe4f4f8e | github.com/ | 1.8.3 | 1 |
| datawire/ | 2beb65062c8b | github.com/ | 1.8.3 | 1 |
| datawire/ | f95ae710d75c | github.com/ | 1.8.3 | 1 |
| datawire/ | 9716efbdd24b | github.com/ | 1.8.3 | 1 |
| ddosify/ | 181965edb12e | github.com/ | 1.8.3 | 1 |
| ddosify/ | a97a1b8a66af | github.com/ | 1.8.3 | 1 |
| deepflowce/ | 34fcc526dd59 | github.com/ | 1.8.3 | 1 |
| dellemc/ | 148ada9060a9 | github.com/ | 1.8.3 | 1 |
| dellemc/ | 660cabd6d929 | github.com/ | 1.8.3 | 1 |
| deluan/ | 11a24da08977 | github.com/ | 1.9.1 | 1 |
| deluan/ | 4e9ae3bff6aa | github.com/ | 1.8.3 | 1 |
| devopstales/ | 75136aa7a26e | github.com/ | 1.9.1 | 1 |
| devspacecloud/ | 49c397413f7b | github.com/ | 1.8.3 | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | 1.8.3 | 1 |
| dongjiang1989/ | 451f7823723c | github.com/ | 1.9.1 | 1 |
| dossif/ | 96dcd2c0e9f2 | github.com/ | 1.9.1 | 1 |
| drone/ | 137e79c5e23c | github.com/ | 1.8.3 | 1 |
| drone/ | 206df2280ecf | github.com/ | 1.8.3 | 1 |
| dtzar/ | a1041bb0f1d1 | github.com/ | 1.9.1 | 1 |
| easysoft/ | 592ad5df1f8b | github.com/ | 1.9.1 | 1 |
| ecadlabs/ | 4bcbe5d1cdd2 | github.com/ | 1.8.3 | 1 |
| elastic/ | c7a1c63257d0 | github.com/ | 1.8.3 | 1 |
| envoyproxy/ | 2a9f99d28567 | github.com/ | 1.9.1 | 1 |
| envoyproxy/ | 71081616da3e | github.com/ | 1.8.3 | 1 |
| envoyproxy/ | b6cb6e16f8c9 | github.com/ | 1.8.3 | 1 |
| envoyproxy/ | ede09a75a84c | github.com/ | 1.8.3 | 1 |
| epamedp/ | 96028c86f0dd | github.com/ | 1.8.3 | 1 |
| epamedp/ | 616c678ba3e7 | github.com/ | 1.8.3 | 1 |
| epamedp/ | ff25e9fe4419 | github.com/ | 1.8.3 | 1 |
| etejeda/ | 737d58183abc | github.com/ | 1.8.3 | 1 |
| ethersphere/ | 3a8a3926caa2 | github.com/ | 1.9.1 | 1 |
| ethpandaops/ | d1780db2e286 | github.com/ | 1.9.1 | 1 |
| ethpandaops/ | 9f1d6aec0d04 | github.com/ | 1.9.1 | 1 |
| everpcpc/ | b378d137ae8b | github.com/ | 1.8.3 | 1 |
| expediagroup/ | 193a00ec8dd4 | github.com/ | 1.8.3 | 1 |
| factly/ | 66fafc7b0a17 | github.com/ | 1.8.3 | 1 |
| factly/ | 94d21479382e | github.com/ | 1.8.3 | 1 |
| factly/ | be85ff1b9bd3 | github.com/ | 1.8.3 | 1 |
| factly/ | 384d384310ef | github.com/ | 1.8.3 | 1 |
| factly/ | 87064eb0463c | github.com/ | 1.8.3 | 1 |
| flanksource/ | 1dacc3195bf9 | github.com/ | 1.9.1 | 1 |
| flomesh/ | 22f849c70b25 | github.com/ | 1.9.1 | 1 |
| fluxcd/ | 92b891e495d8 | github.com/ | 1.8.3 | 1 |
| fluxcd/ | 31a8c79a6803 | github.com/ | 1.8.3 | 1 |
| gabekangas/ | 97461aedb580 | github.com/ | 1.8.3 | 1 |
| galaxy/ | e5c265fe9fcd | github.com/ | 1.8.3 | 1 |
| garugaru/ | 5201314c28f3 | github.com/ | 1.8.3 | 1 |
| garugaru/ | 89d66d117029 | github.com/ | 1.8.3 | 1 |
| gboxproxy/ | 3a9f4a711d5c | github.com/ | 1.8.3 | 1 |
| gitlab/ | 860d4a3fec7a | github.com/ | 1.8.3 | 1 |