StackRadar

CVE-2021-22569

High

Advisory

Published 7 Jan 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
159
of 17,781 indexed, latest versions
Container images
157
deployed by those charts
Fix available
3 of 3
affected packages

A potential Denial of Service issue in protobuf-java

Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 157 images.

Affected packageAffected versionsFixed inImages
protobuf-javamaven2.4.1, 2.5.0, 2.6.0, 2.6.1+28 more3.16.1, 3.18.2, 3.19.2146
google-protobufgem3.8.03.19.24
protobufdeb2.6.1-1.3, 3.0.0-9, 3.0.0-9.1ubuntu1, 3.6.1.3-2ubuntu53.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5.28
OSV records
GHSA-wrvw-hg22-4m67UBUNTU-CVE-2021-22569
Also known as
USN-5945-1

Charts affected

159 by stars
ChartLatestAffected imagesRadar Score
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
protobuf-java@3.11.0
3.16.1

Open the chart page →

15,970
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
protobuf-java@3.3.0
3.16.1

Open the chart page →

7,835
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.3.18fe26efde8e1
protobuf-java@3.7.1
3.16.1

Open the chart page →

28,131
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
protobuf-java@3.10.0
3.16.1

Open the chart page →

19,745
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
protobuf-java@2.5.0
3.16.1

Open the chart page →

8,866
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
protobuf-java@3.7.0
3.16.1

Open the chart page →

14,728
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
protobuf-java@3.11.0
3.16.1

Open the chart page →

5,806
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
protobuf-java@3.19.1
3.19.2

Open the chart page →

13,459
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
protobuf-java@2.6.1
3.16.1

Open the chart page →

6,497
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
protobuf-java@3.5.1
3.16.1

Open the chart page →

23,665
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
protobuf-java@2.5.0
3.16.1

Open the chart page →

14,066
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
protobuf-java@3.6.1
3.16.1

Open the chart page →

22,442
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
protobuf-java@2.5.0
protobuf@2.6.1-1.3
3.16.1
no fix listed

Open the chart page →

77,758
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
protobuf-java@3.5.1
3.16.1
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
protobuf-java@2.4.1
3.16.1

Open the chart page →

16,860
cp-helm-chartscp-helm-charts0.6.16 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

6 of the 8 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
protobuf-java@3.11.4
3.16.1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
protobuf-java@3.11.4
3.16.1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
protobuf-java@3.11.4
3.16.1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
protobuf-java@3.11.4
3.16.1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
protobuf-java@3.11.4
3.16.1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
protobuf-java@3.11.4
3.16.1

Open the chart page →

58,857
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
protobuf-java@2.5.0
3.16.1

Open the chart page →

8,245
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,550
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
protobuf-java@2.5.0
3.16.1

Open the chart page →

6,147
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
protobuf-java@2.5.0
3.16.1

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
protobuf-java@3.5.1
3.16.1

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
protobuf-java@3.12.0
3.16.1

Open the chart page →

2,237
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
protobuf@3.0.0-9.1ubuntu1
3.0.0-9.1ubuntu1.1

Open the chart page →

10,981
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
protobuf-java@3.10.0
3.16.1

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
protobuf-java@3.10.0
3.16.1

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
protobuf-java@3.10.0
3.16.1

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
protobuf-java@3.10.0
3.16.1

Open the chart page →

32,205
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
protobuf-java@3.8.0
3.16.1
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
protobuf-java@3.8.0
3.16.1

Open the chart page →

12,513
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
protobuf-java@2.5.0
3.16.1

Open the chart page →

64,489
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
protobuf-java@2.6.0
3.16.1

Open the chart page →

6,988
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
protobuf-java@3.7.1
3.16.1
gchq/hdfs:3.3.35ec58edbb2db
protobuf-java@2.5.0
3.16.1

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
protobuf-java@2.5.0
3.16.1

Open the chart page →

9,342
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
protobuf-java@2.5.0
3.16.1

Open the chart page →

27,949
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2

Open the chart page →

17,929
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
protobuf-java@3.12.4
3.16.1

Open the chart page →

15,722
hdfsgradiant-bigdataVerified publisher0.1.102 of 2See more

hdfs gradiant-bigdata 0.1.10

2 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
protobuf-java@2.5.0
3.16.1
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
protobuf-java@2.5.0
3.16.1

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.64 of 5See more

hive gradiant-bigdata 0.1.6

4 of the 5 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
protobuf-java@2.5.0
3.16.1
gradiant/hdfs:2.7.73b28784ba41f
protobuf-java@2.5.0
3.16.1
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
protobuf-java@2.5.0
3.16.1
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
protobuf-java@2.5.0
3.16.1

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
protobuf-java@2.5.0
3.16.1

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.74 of 6See more

opentsdb gradiant-bigdata 0.1.7

4 of the 6 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
protobuf-java@2.5.0
3.16.1
gradiant/hdfs:2.7.73b28784ba41f
protobuf-java@2.5.0
3.16.1
gradiant/opentsdb:2.4.0c33d53913869
protobuf-java@2.5.0
3.16.1
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
protobuf-java@2.5.0
3.16.1

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
protobuf-java@2.5.0
3.16.1

Open the chart page →

6,147
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
protobuf-java@3.7.1
3.16.1

Open the chart page →

4,556
hazelcast-jethazelcastVerified publisher1.17.11 of 1See more

hazelcast-jet hazelcast 1.17.1

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
protobuf-java@3.13.0
3.16.1

Open the chart page →

6,102
hbasehbase0.1.72 of 4See more

hbase hbase 0.1.7

2 of the 4 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
protobuf-java@2.5.0
3.16.1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
protobuf-java@2.5.0
3.16.1

Open the chart page →

10,540
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
protobuf-java@3.7.1
3.16.1

Open the chart page →

8,541
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2021-22569.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
protobuf-java@3.14.0
3.16.1

Open the chart page →

1,449

Container images carrying it

157 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
protobuf-java@3.12.0
3.16.1
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
protobuf-java@3.12.0
3.16.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
protobuf-java@2.5.0
3.16.1
1
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
protobuf-java@3.7.1
3.16.1
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
protobuf-java@3.10.0
3.16.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
protobuf-java@3.7.1
3.16.1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
protobuf-java@3.12.2
3.16.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.