CVE-2025-65637
HighAdvisory
Published 4 Dec 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,787 indexed, latest versions
- Container images
- 787
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Logrus is vulnerable to DoS when using Entry.Writer()
Carried by container images the latest versions of 751 of 17,787 indexed charts deploy, on 787 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more | 1.8.3, 1.9.1, 1.9.3 | 787 |
| skopeorpm | 2:1.11.2-0.1.el9 | 2:1.11.4-0.1.el9_2.5 | 1 |
- OSV records
- GHSA-4f99-4q7p-p3ghRHSA-2026:13971
- Also known as
- GO-2025-4188
Charts affected
751 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
787 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gitlab/ | fd7e5dfb9f30 | github.com/ | 1.8.3 | 1 |
| gkarthics/ | 6799af333e8a | github.com/ | 1.8.3 | 1 |
| gocrane/ | a1400909118c | github.com/ | 1.8.3 | 1 |
| goharbor/ | 6ab3ca28e9e5 | github.com/ | 1.8.3 | 1 |
| goharbor/ | 6412d679fdc3 | github.com/ | 1.9.3 | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ | 1.8.3 | 1 |
| goharbor/ | 39435daedd0c | github.com/ | 1.9.3 | 1 |
| goharbor/ | 8d5339ff2d74 | github.com/ | 1.8.3 | 1 |
| goharbor/ | 7f82ed1e2635 | github.com/ | 1.8.3 | 1 |
| goharbor/ | cce272836449 | github.com/ | 1.9.3 | 1 |
| goharbor/ | b9522c3f5056 | github.com/ | 1.8.3 | 1 |
| goharbor/ | dc5b882a7db4 | github.com/ | 1.9.1 | 1 |
| gomods/ | d714c7ff0231 | github.com/ | 1.8.3 | 1 |
| gomods/ | efb811df7844 | github.com/ | 1.8.3 | 1 |
| goofball222/ | 7bf26032dfce | github.com/ | 1.9.1 | 1 |
| gophish/ | 8a57cd171999 | github.com/ | 1.8.3 | 1 |
| gotify/ | 09c79bc1e403 | github.com/ | 1.8.3 | 1 |
| grafana/ | 825c09373d27 | github.com/ | 1.8.3 | 1 |
| grafana/ | 045c9125634c | github.com/ | 1.9.3 | 1 |
| grafana/ | 09bb407e26ab | github.com/ | 1.8.3 | 1 |
| grafana/ | 1a359d92f40e | github.com/ | 1.9.1 | 1 |
| grafana/ | 39c849cebccc | github.com/ | 1.9.1 | 1 |
| grafana/ | 696823fbc561 | github.com/ | 1.8.3 | 1 |
| grafana/ | 76dcf36e7d2a | github.com/ | 1.9.1 | 1 |
| grafana/ | 9746858c20e6 | github.com/ | 1.8.3 | 1 |
| grafana/ | a738d0744784 | github.com/ | 1.8.3 | 1 |
| grafana/ | cd7cb4345aa7 | github.com/ | 1.8.3 | 1 |
| grafana/ | cf81d2c753c8 | github.com/ | 1.8.3 | 1 |
| grafana/ | d322192ed2fa | github.com/ | 1.8.3 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 1.8.3 | 1 |
| grafana/ | 3d85bb66e39b | github.com/ | 1.8.3 | 1 |
| grafana/ | 77e138f81a8e | github.com/ | 1.8.3 | 1 |
| grafana/ | b1da1d23037e | github.com/ | 1.9.1 | 1 |
| grafana/ | b3af8ead67d7 | github.com/ | 1.8.3 | 1 |
| grafana/ | ab2a2569307b | github.com/ | 1.8.3 | 1 |
| grafana/ | 80c1a8eb24dd | github.com/ | 1.8.3 | 1 |
| grafana/ | 330f990cdad9 | github.com/ | 1.9.1 | 1 |
| grafana/ | 072527b12cdf | github.com/ | 1.8.3 | 1 |
| grafana/ | 5fd12edcc694 | github.com/ | 1.8.3 | 1 |
| grafana/ | c16c710f7333 | github.com/ | 1.8.3 | 1 |
| grafana/ | d3c9093401ca | github.com/ | 1.8.3 | 1 |
| haproxytech/ | 14e4afa90dfd | github.com/ | 1.9.1 | 1 |
| hashicorp/ | fb70bd9210ff | github.com/ | 1.8.3 | 1 |
| hashicorp/ | 712fe02d2f84 | github.com/ | 1.9.1 | 1 |
| hashicorp/ | ddff34041c5c | github.com/ | 1.8.3 | 1 |
| hashicorp/ | 0e4452f0f265 | github.com/ | 1.8.3 | 1 |
| hashicorp/ | 62bed1bf8106 | github.com/ | 1.8.3 | 1 |
| hashicorp/ | 0b01ed3924e6 | github.com/ | 1.9.1 | 1 |
| hashicorp/ | b2177a8bfe85 | github.com/ | 1.9.1 | 1 |
| hashicorp/ | dfc3500beb0e | github.com/ | 1.8.3 | 1 |