StackRadar

CVE-2021-22570

Medium

Advisory

Published 26 Jan 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.027
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
38
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
protobufdeb2.6.1-1.3, 3.0.0-9.1ubuntu1, 3.6.1.3-2ubuntu52.6.1-1.3ubuntu0.1~esm1, 3.0.0-9.1ubuntu1.1, 3.6.1.3-2ubuntu5.26
protobufpypi3.5.1, 3.5.2, 3.6.1, 3.7.0+6 more3.15.032
OSV records
UBUNTU-CVE-2021-22570PYSEC-2022-48
Also known as
GHSA-77rm-9x9h-xj3g, USN-5490-1, USN-5945-1

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
protobuf@3.14.0
3.15.0

Open the chart page →

1,447
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
3.15.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
3.15.0

Open the chart page →

4,061
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
protobuf@3.13.0
3.15.0

Open the chart page →

4,086
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
protobuf@3.13.0
3.15.0

Open the chart page →

4,918
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
protobuf@3.13.0
3.15.0

Open the chart page →

5,173
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
3.15.0

Open the chart page →

5,851
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
3.15.0

Open the chart page →

52,919
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
protobuf@3.6.1
3.15.0

Open the chart page →

6,307
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2

Open the chart page →

4,830
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
protobuf@3.14.0
3.15.0

Open the chart page →

6,868
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
protobuf@3.5.1
3.15.0

Open the chart page →

36,094
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
protobuf@3.7.0
3.15.0

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
protobuf@3.13.0
3.15.0

Open the chart page →

7,984
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
protobuf@3.13.0
3.15.0

Open the chart page →

5,521
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
protobuf@3.5.1
3.15.0

Open the chart page →

36,094
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
protobuf@3.7.1
3.15.0

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1

Open the chart page →

77,758
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
protobuf@3.13.0
3.15.0

Open the chart page →

16,860
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
protobuf@3.12.2
3.15.0

Open the chart page →

4,422
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
protobuf@3.14.0
3.15.0

Open the chart page →

1,990
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
protobuf@3.13.0
3.15.0

Open the chart page →

5,055
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
protobuf@3.0.0-9.1ubuntu1
3.0.0-9.1ubuntu1.1

Open the chart page →

10,981
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
protobuf@3.6.1
3.15.0

Open the chart page →

64,489
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2

Open the chart page →

17,929
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
protobuf@3.12.2
3.15.0

Open the chart page →

4,422
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
protobuf@3.13.0
3.15.0

Open the chart page →

7,984
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2

Open the chart page →

5,958
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
protobuf@3.13.0
3.15.0

Open the chart page →

1,850
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
protobuf@3.13.0
3.15.0

Open the chart page →

26,018
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1

Open the chart page →

63,223
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
protobuf@3.7.0
3.15.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
protobuf@3.5.2
3.15.0
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
protobuf@3.5.2
3.15.0

Open the chart page →

88,546
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
protobuf@3.7.0
3.15.0
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
protobuf@3.5.2
3.15.0

Open the chart page →

26,211
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1

Open the chart page →

29,124
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
protobuf@3.6.1
3.15.0

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
protobuf@3.6.1
3.15.0
voltha/voltha-netconf:1.6.037f80524c207
protobuf@3.6.1
3.15.0
voltha/voltha-ofagent:1.6.09ee8c1f4428c
protobuf@3.6.1
3.15.0
voltha/voltha-voltha:1.6.0ff596b62de59
protobuf@3.6.1
3.15.0

Open the chart page →

93,855
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
protobuf@3.7.1
3.15.0

Open the chart page →

23,007
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
protobuf@3.13.0
3.15.0

Open the chart page →

2,296
gtmetrix-bqt3n1.0.01 of 1See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
protobuf@3.11.3
3.15.0

Open the chart page →

1,287
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-22570.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
protobuf@3.13.0
3.15.0

Open the chart page →

4,086

Container images carrying it

38 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1
3
amancevice/superset:0.35.212a0a9e66550
protobuf@3.11.2
3.15.0
2
datawire/aes:1.14.48588eafe6862
protobuf@3.13.0
3.15.0
2
larribas/mlflow:1.9.105ccb0b46bfb
protobuf@3.12.2
3.15.0
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
protobuf@3.7.0
3.15.0
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
protobuf@3.5.2
3.15.0
2
weblate/weblate:4.2.2-169c160d37a3c
protobuf@3.13.0
3.15.0
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
protobuf@3.14.0
3.15.0
2
amancevice/superset:0.28.1c8c04bfe3d66
protobuf@3.7.1
3.15.0
1
apachepulsar/pulsar:2.6.14db6ff0b4045
protobuf@3.13.0
3.15.0
1
cheyang/distributed-tf:1.6.046cc34755493
protobuf@3.5.1
3.15.0
1
datadog/agent:7.22.08f20e56b5311
protobuf@3.7.0
3.15.0
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
protobuf@3.13.0
3.15.0
1
datawire/aes:1.13.62beb65062c8b
protobuf@3.13.0
3.15.0
1
datawire/emissary:2.0.2-ea9716efbdd24b
protobuf@3.13.0
3.15.0
1
dysnix/pritunl:v1.29-r819951e3e7a32
protobuf@3.13.0
3.15.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
protobuf@3.6.1
3.15.0
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
protobuf@3.14.0
3.15.0
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2
1
lncm/specter-desktop:v0.10.4bca14d04397d
protobuf@3.13.0
3.15.0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
protobuf@3.5.2
3.15.0
1
rook/ceph:v1.20.72f970c425617
protobuf@3.14.0
3.15.0
1
rook/ceph:v1.19.2944a1dd70496
protobuf@3.14.0
3.15.0
1
seldonio/locust-core:0.81d0da98a2d76
protobuf@3.7.1
3.15.0
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
protobuf@3.13.0
3.15.0
1
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
protobuf@3.11.3
3.15.0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
protobuf@3.5.1
3.15.0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
protobuf@2.6.1-1.3
2.6.1-1.3ubuntu0.1~esm1
1
voltha/voltha-cli:1.6.0c4e41e92f046
protobuf@3.6.1
3.15.0
1
voltha/voltha-netconf:1.6.037f80524c207
protobuf@3.6.1
3.15.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
protobuf@3.6.1
3.15.0
1
voltha/voltha-tester:1.7.0655c3048a602
protobuf@3.6.1
3.15.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
protobuf@3.6.1
3.15.0
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
protobuf@3.13.0
3.15.0
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
protobuf@3.0.0-9.1ubuntu1
3.0.0-9.1ubuntu1.1
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
protobuf@3.6.1.3-2ubuntu5
3.6.1.3-2ubuntu5.2
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
protobuf@3.6.1
3.15.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.