StackRadar

CVE-2025-65637

High

Advisory

Published 4 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
793
deployed by those charts
Fix available
2 of 2
affected packages

Logrus is vulnerable to DoS when using Entry.Writer()

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 793 images.

Affected packageAffected versionsFixed inImages
github.com/sirupsen/logrusgolangv1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more1.8.3, 1.9.1, 1.9.3793
skopeorpm2:1.11.2-0.1.el92:1.11.4-0.1.el9_2.51
OSV records
GHSA-4f99-4q7p-p3ghRHSA-2026:13971
Also known as
GO-2025-4188

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1

Open the chart page →

13,197
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/sirupsen/logrus@v1.6.0
1.8.3

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-65637.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
github.com/sirupsen/logrus@v1.6.0
1.8.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
github.com/sirupsen/logrus@v1.0.6
1.8.3

Open the chart page →

5,033

Container images carrying it

793 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
loftsh/directclusterendpoint:1.14.0310cc7d690f5
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
logiqai/logiqctl:2.0.4798306811f2d
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
lumenvox/cloud-license:2.0.09a69862e1248
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
matrixdb/rawfile-csi:v0.2.195b2e38e913d
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
mattermost/mattermost-app-chaosengine:c153e436268954edd67
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
mesosphere/karma:v0.55-d2iq-proxy4693bb4e0814
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
milvusdb/etcd:3.5.5-r2102aac62827b
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
milvusdb/milvus:v2.2.13a3a55e1c1497
github.com/sirupsen/logrus@v1.9.2
1.9.3
1
minio/operator:v5.0.9170b154d2c61
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
github.com/sirupsen/logrus@v1.2.0
1.8.3
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
github.com/sirupsen/logrus@v1.0.1-0.20170620144510-3d4380f53a34
1.8.3
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
github.com/sirupsen/logrus@v1.3.0
1.8.3
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
github.com/sirupsen/logrus@v1.3.0
1.8.3
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
moikot/smartthings-metrics:0.1.08625f53aa9b7
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
moikot/smartthings-metrics:feat-log-detailsfb8565140106
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
muonsoft/openapi-mock:latestc9afe1295484
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
murtazashah46/helmfile:latest4d11726cf803
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
natsio/nats-operator:0.8.31261dae38389
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
netapp/trident-operator:21.10.049cfe552d9c2
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
netrisai/netris-operator:v4.0.244f60aa0d898
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
nmalhotr/webserver:v1.0.03419361fb0dd
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
ntakashi/cole:1.2.3f7b68bee2a68
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
ntakashi/gitana:1.4.04171ec641120
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
oliver006/redis_exporter:v1.11.104d958d209ab
github.com/sirupsen/logrus@v1.6.0
1.8.3
1
oliver006/redis_exporter:v1.14.0d55e056987af
github.com/sirupsen/logrus@v1.7.0
1.8.3
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
openpolicyagent/opa:0.53.16a58dea59933
github.com/sirupsen/logrus@v1.9.2
1.9.3
1
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
github.com/sirupsen/logrus@v1.4.2
1.8.3
1
oryd/kratos:v1.1.08f15006a080d
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/sirupsen/logrus@v1.8.1
1.8.3
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/sirupsen/logrus@v1.9.0
1.9.1
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/sirupsen/logrus@v1.7.0
1.8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.