CVE-2025-65637
HighAdvisory
Published 4 Dec 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,781 indexed, latest versions
- Container images
- 787
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Logrus is vulnerable to DoS when using Entry.Writer()
Carried by container images the latest versions of 751 of 17,781 indexed charts deploy, on 787 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.0.1-0.20170620144510-3d4380f53a34, v1.0.4, v1.0.6, v1.0.6-0.20180625052543-e3292c4c4d7f+11 more | 1.8.3, 1.9.1, 1.9.3 | 787 |
| skopeorpm | 2:1.11.2-0.1.el9 | 2:1.11.4-0.1.el9_2.5 | 1 |
- OSV records
- GHSA-4f99-4q7p-p3ghRHSA-2026:13971
- Also known as
- GO-2025-4188
Charts affected
751 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
787 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| wurstmeister/ | 2d4bbf9cc83d | github.com/ | 1.8.3 | 7 |
| quay.io/ | c8958d9533c7 | github.com/ | 1.8.3 | 6 |
| quay.io/ | 2e4c14d1b444 | github.com/ | 1.8.3 | 6 |
| quay.io/ | 2ad610626658 | github.com/ | 1.8.3 | 6 |
| registry.k8s.io/ | 639a1e2da549 | github.com/ | 1.8.3 | 6 |
| registry.k8s.io/ | 543c40fd0939 | github.com/ | 1.8.3 | 5 |
| registry.k8s.io/ | a7943503b45d | github.com/ | 1.9.1 | 5 |
| grafana/ | 1ee60f980950 | github.com/ | 1.8.3 | 4 |
| hyperledger/ | 6ff36af21eb1 | github.com/ | 1.8.3 | 4 |
| hyperledger/ | b1194f509085 | github.com/ | 1.8.3 | 4 |
| ghcr.io/ | ab2e1fa19dd4 | github.com/ | 1.9.1 | 4 |
| registry.k8s.io/ | 39c5b2e3310d | github.com/ | 1.8.3 | 4 |
| registry.k8s.io/ | 4d99688e5573 | github.com/ | 1.8.3 | 4 |
| registry.k8s.io/ | 64d8c73dca98 | github.com/ | 1.8.3 | 4 |
| argoproj/ | 830e86cacefd | github.com/ | 1.8.3 | 3 |
| cockroachdb/ | 07a49acec18d | github.com/ | 1.9.1 | 3 |
| grafana/ | 00568d89c4f8 | github.com/ | 1.8.3 | 3 |
| grafana/ | 626900031c4e | github.com/ | 1.8.3 | 3 |
| library/ | af96c680a7e1 | github.com/ | 1.9.1 | 3 |
| prom/ | d23aca343b86 | github.com/ | 1.8.3 | 3 |
| stakater/ | 83fef483d497 | github.com/ | 1.8.3 | 3 |
| ghcr.io/ | b776dae45d08 | github.com/ | 1.8.3 | 3 |
| public.ecr.aws/ | fefa9ee7256a | github.com/ | 1.9.1 | 3 |
| quay.io/ | aa4da00c5b96 | github.com/ | 1.8.3 | 3 |
| quay.io/ | f0c6fba81a24 | github.com/ | 1.9.1 | 3 |
| quay.io/ | 2b6db27eaf3d | github.com/ | 1.8.3 | 3 |
| quay.io/ | 51f294c56842 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 75fb847ac045 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 39f2c6e0af38 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 88c64b1b6ec8 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 4c3b91bebd3d | github.com/ | 1.8.3 | 3 |
| quay.io/ | eec0305b594c | github.com/ | 1.9.1 | 3 |
| quay.io/ | 7bcf286807b8 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 908dbee5c546 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 1a3e9a878e50 | github.com/ | 1.8.3 | 3 |
| quay.io/ | 38d40a760569 | github.com/ | 1.8.3 | 3 |
| quay.io/ | a8779cfe553e | github.com/ | 1.8.3 | 3 |
| registry.k8s.io/ | 4ba73c697770 | github.com/ | 1.8.3 | 3 |
| registry.k8s.io/ | e5c4824e7375 | github.com/ | 1.8.3 | 3 |
| abutaha/ | 190ed2d1dfc8 | github.com/ | 1.8.3 | 2 |
| bitnamilegacy/ | d17df1f9d745 | github.com/ | 1.8.3 | 2 |
| cesanta/ | 4d16885f3d4c | github.com/ | 1.8.3 | 2 |
| containersol/ | a914972d19ad | github.com/ | 1.8.3 | 2 |
| crate/ | b8d89fa5d19b | github.com/ | 1.8.3 | 2 |
| csiplugin/ | 0766163dc046 | github.com/ | 1.8.3 | 2 |
| datawire/ | 8588eafe6862 | github.com/ | 1.8.3 | 2 |
| dmilhdef/ | fada1a6e7638 | github.com/ | 1.8.3 | 2 |
| drone/ | 4359bf2bb3dc | github.com/ | 1.8.3 | 2 |
| free5gc/ | 687ff4daf5da | github.com/ | 1.8.3 | 2 |
| free5gc/ | e2a4dd98a4ed | github.com/ | 1.9.1 | 2 |