CVE-2025-65637

CVE-2025-65637 is a denial-of-service vulnerability in github.com/sirupsen/logrus, specifically affecting versions prior to 1.8.3, 1.9.0, and 1.9.2, including products like turbopuffer. It occurs when Entry.Writer() attempts to log a single-line payload exceeding 64KB without newlines, causing the internal bufio.Scanner to fail and the writer pipe to close, leading to application unavailability. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and a high impact on availability. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. While there is limited community discussion, it has been referenced in a critical patch for kata-containers, suggesting awareness within some development communities.