StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
kubernetesui/metrics-scraper:v1.0.876049887f07a
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
kubesphere/openelb:v0.5.0b5b665c4672c
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
kubevious/ui:1.2.16233e84bdd59
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
kusionstack/karpor:v0.6.4b707d3bf0abd
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
layer5/meshery-osm:stable-latestec898e5786c6
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/caddy:2.660fb54d36b4b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/caddy:2.2.0-alpine7367adca165f
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
library/caddy:2.4.5874405536b3e
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/caddy:2.4.2-alpinefbc51bcf1ab0
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
library/chronograf:1.9.496d8a3f65a4f
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/docker:24.0.2-dind1d148deae16a
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/docker:20.10.21-dind3153fa63f546
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/docker:23.0.6-dindafa5d5134900
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/influxdb:2.7.4-alpinea10d46445d68
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
library/kapacitor:1.6.37232f6388a4d
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/telegraf:1.20.428e98eece020
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
library/telegraf:1.19.0-alpine794079a7f241
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/telegraf:1.19-alpineaddb86c0c520
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
library/traefik:v2.10.11489caffaedb
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
library/traefik:2.5.62f603f8d3abe
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
library/traefik:v1.7.345d47b7bb2546
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
library/traefik:2.5.47d0228d19042
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/traefik:2.4.8eda951fd29a8
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
library/traefik:2.2.8f5af5a5ce17f
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
library/vault:1.13.3f98ac9dd97b0
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/hufu:v1.2.13d5752dac834
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/passport:v0.2.163e7d05ded625
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
lmierzwa/karma:v0.503751e5eed656
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
lmierzwa/karma:v0.70d417abe7ddb5
github.com/sirupsen/logrus@v1.6.0
1.8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.