StackRadar

CVE-2021-3121

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
308
deployed by those charts
Fix available
1 of 1
affected package

Improper Input Validation in GoGo Protobuf

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 308 images.

Affected packageAffected versionsFixed inImages
github.com/gogo/protobufgolangv0.0.0-20160824171236-909568be09de, v0.0.0-20170307180453-100ba4e88506, v1.0.0, v1.1.1+7 more1.3.2308
OSV records
GHSA-c3h9-896r-86jm
Also known as
BIT-consul-2021-3121, BIT-protobuf-2021-3121, GO-2021-0053

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

4,086
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/gogo/protobuf@v1.2.0
1.3.2

Open the chart page →

4,984
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

6,915
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,743
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gogo/protobuf@v1.3.0
1.3.2

Open the chart page →

3,369
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

12,606
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,023

Container images carrying it

308 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
weaveworks/flagger:1.0.0-rc.5174307de1b36
github.com/gogo/protobuf@v1.3.1
1.3.2
1
weaveworks/flagger:0.19.0a9c2e9df4227
github.com/gogo/protobuf@v1.2.1
1.3.2
1
weaveworks/flagger-loadtester:0.9.03cdac6928a63
github.com/gogo/protobuf@v1.2.1
1.3.2
1
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
github.com/gogo/protobuf@v1.3.1
1.3.2
1
zufardhiyaulhaq/nodejsweekly:v1.1.0306859a3f167
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook873b968f02b5
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator1e3db4f2eeed
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/activatora5de0fb75046
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler2ef460356b17
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdb6ceff2aab4
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookd27b4495ccc3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookf16c0e022203
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
github.com/gogo/protobuf@v1.3.1
1.3.2
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
github.com/gogo/protobuf@v1.2.0
1.3.2
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
github.com/gogo/protobuf@v1.2.0
1.3.2
1
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cmacrae/kove:v0.2.0185bfaae750c
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/gogo/protobuf@v1.3.1
1.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.