StackRadar

CVE-2021-3121

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
308
deployed by those charts
Fix available
1 of 1
affected package

Improper Input Validation in GoGo Protobuf

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 308 images.

Affected packageAffected versionsFixed inImages
github.com/gogo/protobufgolangv0.0.0-20160824171236-909568be09de, v0.0.0-20170307180453-100ba4e88506, v1.0.0, v1.1.1+7 more1.3.2308
OSV records
GHSA-c3h9-896r-86jm
Also known as
BIT-consul-2021-3121, BIT-protobuf-2021-3121, GO-2021-0053

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

4,086
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/gogo/protobuf@v1.2.0
1.3.2

Open the chart page →

4,984
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

6,915
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,743
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gogo/protobuf@v1.3.0
1.3.2

Open the chart page →

3,369
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

12,606
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,023

Container images carrying it

308 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
github.com/gogo/protobuf@v1.2.1
1.3.2
1
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
github.com/gogo/protobuf@v1.3.1
1.3.2
1
mesosphere/kubefed:proxyurl4fd8889195fe
github.com/gogo/protobuf@v1.3.1
1.3.2
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
github.com/gogo/protobuf@v1.3.1
1.3.2
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
github.com/gogo/protobuf@v1.1.1
1.3.2
1
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
github.com/gogo/protobuf@v1.2.1
1.3.2
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
github.com/gogo/protobuf@v1.3.1
1.3.2
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
github.com/gogo/protobuf@v1.2.1
1.3.2
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/gogo/protobuf@v1.3.1
1.3.2
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/gogo/protobuf@v1.3.1
1.3.2
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/gogo/protobuf@v1.2.1
1.3.2
1
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
github.com/gogo/protobuf@v1.3.1
1.3.2
1
nerzhul/mc-arm64:2020.10.034215df511f31
github.com/gogo/protobuf@v1.3.1
1.3.2
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
github.com/gogo/protobuf@v1.3.1
1.3.2
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
github.com/gogo/protobuf@v1.3.1
1.3.2
1
olliai/exposecontroller:1.0.5a470d96525e4
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
github.com/gogo/protobuf@v1.3.0
1.3.2
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/gogo/protobuf@v1.3.1
1.3.2
1
prom/prometheus:v2.18.15880ec936055
github.com/gogo/protobuf@v1.3.1
1.3.2
1
prom/prometheus:v2.19.2cd134bd4fca0
github.com/gogo/protobuf@v1.3.1
1.3.2
1
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/gogo/protobuf@v1.3.1
1.3.2
1
rancher/hardened-calico:v3.13.36d2cd61a338b
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
github.com/gogo/protobuf@v0.0.0-20160824171236-909568be09de
1.3.2
1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
github.com/gogo/protobuf@v1.3.1
1.3.2
1
reportportal/service-index:5.0.112b27a2d7a87d
github.com/gogo/protobuf@v1.2.1
1.3.2
1
rookout/k8s-operator:latest0d083f3ef1a7
github.com/gogo/protobuf@v1.3.1
1.3.2
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
slamdev/config-connector-templater:0.0.3a234541c9fa8
github.com/gogo/protobuf@v1.3.1
1.3.2
1
slamdev/external-secrets-operator:0.0.8855f6625dda4
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
github.com/gogo/protobuf@v1.3.1
1.3.2
1
softonic/pod-defaulter:0.1.072017aed5902
github.com/gogo/protobuf@v1.3.1
1.3.2
1
softonic/rate-limit-operator:0.1.1910f6de37763
github.com/gogo/protobuf@v1.3.1
1.3.2
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/gogo/protobuf@v1.3.1
1.3.2
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
github.com/gogo/protobuf@v1.3.1
1.3.2
1
stakater/tronador:v0.0.137ce9acf2722
github.com/gogo/protobuf@v1.3.1
1.3.2
1
stakater/whitelister:v0.0.1639107924063e
github.com/gogo/protobuf@v1.3.1
1.3.2
1
stakater/workshop-operator:v0.0.3897bf456cc97c
github.com/gogo/protobuf@v1.3.1
1.3.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/gogo/protobuf@v1.3.1
1.3.2
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/gogo/protobuf@v1.3.1
1.3.2
1
toucansoftware/spa-reloader:latestc187b1fba501
github.com/gogo/protobuf@v1.3.1
1.3.2
1
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
github.com/gogo/protobuf@v1.3.1
1.3.2
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/gogo/protobuf@v1.3.1
1.3.2
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/gogo/protobuf@v1.3.1
1.3.2
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/gogo/protobuf@v1.3.1
1.3.2
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/gogo/protobuf@v1.3.1
1.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.