CVE-2021-22569

High

Advisory

Published 7 Jan 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.017; 75th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 159; of 17,781 indexed, latest versions
Container images: 157; deployed by those charts
Fix available: 3 of 3; affected packages

A potential Denial of Service issue in protobuf-java

Carried by container images the latest versions of 159 of 17,781 indexed charts deploy, on 157 images.

Affected package	Affected versions	Fixed in	Images
protobuf-javamaven	2.4.1, 2.5.0, 2.6.0, 2.6.1+28 more	3.16.1, 3.18.2, 3.19.2	146
google-protobufgem	3.8.0	3.19.2	4
protobufdeb	2.6.1-1.3, 3.0.0-9, 3.0.0-9.1ubuntu1, 3.6.1.3-2ubuntu5	3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5.2	8

OSV records: GHSA-wrvw-hg22-4m67 UBUNTU-CVE-2021-22569
Also known as: USN-5945-1

Charts affected

159 by stars

Chart

Latest

Affected images

Radar Score

zipkin-gcpt3n

1.0.0

1 of 1 See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-gcp :0.15.2	b5d51d1144e2	protobuf-java@3.9.1	3.16.1

Open the chart page →

4,538

hadoop-deploymenttejaswita-hadoop-helmchart

1.0.0

1 of 1 See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
apache/hadoop :3	af361b20bec0	protobuf-java@2.5.0	3.16.1

Open the chart page →

4,240

shenyutest-helm

2.4.21

2 of 2 See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	protobuf-java@3.8.0	3.16.1
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	protobuf-java@3.8.0	3.16.1

Open the chart page →

12,513

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	protobuf-java@3.18.0	3.18.2

Open the chart page →

12,455

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	protobuf-java@2.5.0	3.16.1

Open the chart page →

9,397

sonarqubewebencryptor

6.7.3

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	protobuf-java@3.8.0	3.16.1

Open the chart page →

5,460

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	protobuf-java@3.12.2	3.16.1

Open the chart page →

28,605

apicurio-registry-sqlwitcom-gmbh

0.1.0

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	protobuf-java@3.13.0	3.16.1

Open the chart page →

3,424

opendistro-eswitcom-gmbh

1.13.3

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-22569.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	protobuf-java@3.11.0	3.16.1

Open the chart page →

5,806

Container images carrying it

157 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
marcelmay/hadoop-hdfs-fsimage-exporter :1.2	6292c0a41ffa	protobuf-java@2.5.0	3.16.1	8
gradiant/hdfs :2.7.7	3b28784ba41f	protobuf-java@2.5.0	3.16.1	7
bde2020/hive :2.3.2-postgresql-metastore	620267768985	protobuf-java@2.5.0	3.16.1	4
gradiant/hbase-base :2.0.1	a1ee6de94c04	protobuf-java@2.5.0	3.16.1	4
mastercloudapps/planner :v1.23	40a950b311b2	protobuf-java@3.10.0	3.16.1	4
apache/shenyu-admin :2.4.2	e8b7c4ddd069	protobuf-java@3.8.0	3.16.1	3
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	protobuf-java@3.8.0	3.16.1	3
codeurjc/planner :v1.0	800cf520c245	protobuf-java@3.10.0	3.16.1	3
gchq/hdfs :3.3.3	5ec58edbb2db	protobuf-java@2.5.0	3.16.1	3
library/solr :8.11.1	8c5f7881cebb	protobuf-java@3.11.0	3.16.1	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	protobuf@2.6.1-1.3	no fix listed	3
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	protobuf-java@3.11.0	3.16.1	2
apache/druid :37.0.0	0116fb802786	protobuf-java@3.7.1	3.16.1	2
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	protobuf-java@2.4.1	3.16.1	2
danisla/hadoop :2.9.0	255ba2dd739b	protobuf-java@2.5.0	3.16.1	2
gradiant/hive :2.3.2-postgresql-metastore	aae4f8a21f8b	protobuf-java@2.5.0	3.16.1	2
gradiant/opentsdb :2.4.0	c33d53913869	protobuf-java@2.5.0	3.16.1	2
gradiant/spark :2.4.4-python-alpine	97657d56e927	protobuf-java@2.5.0	3.16.1	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	protobuf-java@3.19.1	3.19.2	2
opensearchproject/opensearch :1.1.0	967d7f57f72f	protobuf-java@3.11.0	3.16.1	2
5200710/hadoop :3.2.3-java8	092d3088a5fb	protobuf-java@3.7.1	3.16.1	1
5200710/hive :3.1.3-postgresql-metastore	e34ab066d2ed	protobuf-java@2.5.0	3.16.1	1
adagber/planner :v1.0	e5c1ed097752	protobuf-java@3.10.0	3.16.1	1
amartinm82/planner :v2.0	1184353ff57b	protobuf-java@3.10.0	3.16.1	1
anguda/ant-media :2.5	c435285fc241	protobuf-java@3.12.4	3.16.1	1
apache/bookkeeper :4.14.5	a7d9970c148f	protobuf-java@3.14.0	3.16.1	1
apache/drill :1.21.1	1f96558fd292	protobuf-java@2.5.0	3.16.1	1
apache/druid :29.0.1	0cef139b6bf1	protobuf-java@3.7.1	3.16.1	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	protobuf-java@3.7.1	3.16.1	1
apache/hadoop :3	af361b20bec0	protobuf-java@2.5.0	3.16.1	1
apacheignite/ignite :2.7.0	d7deab68b8fa	protobuf-java@2.5.0	3.16.1	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	protobuf-java@3.11.4	3.16.1	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	protobuf-java@3.5.1	3.16.1	1
apachepulsar/pulsar :2.9.0	d056c89b7131	protobuf-java@3.11.4	3.16.1	1
apachepulsar/pulsar :2.8.2	d538416d5afe	protobuf-java@3.11.4	3.16.1	1
apache/ranger :2.7.0	76c176e8a0e4	protobuf-java@3.7.1	3.16.1	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	protobuf-java@3.12.0	3.16.1	1
apache/shenyu-bootstrap :2.5.1	1bd5756f6273	protobuf-java@3.15.3	3.16.1	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	protobuf-java@3.11.4	3.16.1	1
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	protobuf-java@3.13.0	3.16.1	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	protobuf-java@3.18.0	3.18.2	1
arturisimo/planner :v1.0	fff9de644941	protobuf-java@3.10.0	3.16.1	1
assistiot/automated_configuration :latest	23f195a7a26a	protobuf-java@3.7.0	3.16.1	1
assistiot/cybersecurity-monitoring_id-elk :latest	ba1d85ec3739	protobuf-java@3.11.0	3.16.1	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	protobuf-java@2.5.0	3.16.1	1
atlassian/jira-software :8.14.0	37bc46cbec1a	protobuf-java@3.0.2	3.16.1	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	protobuf-java@3.11.4	3.16.1	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	protobuf-java@3.11.4	3.16.1	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	protobuf-java@3.11.4	3.16.1	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	protobuf-java@3.11.4	3.16.1	1