GHSA-4f99-4q7p-p3gh · Severity: high · Ecosystem: go — Logrus is vulnerable to DoS when using Entry.Writer()
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
Conclusion & alert: CVE-2025-65637 is rated High Exploit Risk (60.3/100): CVSS High severity, with low exploitation likelihood (EPSS 0.56%). Core evidence: 4 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| — | nvd_ref | exploit_tag | Exploit-DB ↗ | |
| — | nvd_ref | exploit_tag | Exploit-DB ↗ | |
| — | nvd_ref | exploit_tag | Exploit-DB ↗ | |
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.06% | 0.56% | +0.51% |
| 2 | 2026-05-14 | 0.01% | 0.06% | +0.05% |
| 3 | 2025-12-05 | — | 0.01% | — |
Full EPSS history (3 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 7.5 | 3.1 | HIGH |
|
3.9 | 3.6 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
GHSA-4f99-4q7p-p3gh · Severity: high · Ecosystem: go — Logrus is vulnerable to DoS when using Entry.Writer()
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2025-65637 not yet assigned priority: Debian including 1 source packages (golang-logrus), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): open 3, resolved 2. | https://security-tracker.debian.org/tracker/CVE-2025-65637 |
redhat
|
medium | — | https://access.redhat.com/security/cve/CVE-2025-65637 |
ubuntu
|
medium | CVE-2025-65637 medium priority: Ubuntu including 1 source packages (golang-logrus), 8 status rows across 8 suites (bionic, focal, jammy, noble, plucky, questing, upstream, xenial): needs-triage 6, ignored 1, released 1. | https://ubuntu.com/security/CVE-2025-65637 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| turbopuffer | logrus | < 1.8.3 | cpe:2.3:a:turbopuffer:logrus:*:*:*:*:*:go:*:* |
| turbopuffer | logrus | 1.9.0 | cpe:2.3:a:turbopuffer:logrus:1.9.0:*:*:*:*:go:*:* |
| turbopuffer | logrus | 1.9.2 | cpe:2.3:a:turbopuffer:logrus:1.9.2:*:*:*:*:go:*:* |
| URL | Tags |
|---|---|
| https://github.com/mjuanxd/logrus-dos-poc | Exploit Third Party Advisory |
| https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md | Exploit Third Party Advisory |
| https://github.com/sirupsen/logrus/issues/1370 | Exploit Issue Tracking Patch |
| https://github.com/sirupsen/logrus/pull/1376 | Issue Tracking Patch |
| https://github.com/sirupsen/logrus/releases/tag/v1.8.3 | Release Notes |
| https://github.com/sirupsen/logrus/releases/tag/v1.9.1 | Release Notes |
| https://github.com/sirupsen/logrus/releases/tag/v1.9.3 | Release Notes |
| https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 | Exploit Third Party Advisory |