CVE-2021-3121
HighAdvisory
Published 14 Apr 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.6
- base score, highest
- EPSS
- 0.035
- 88th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 308
- of 17,781 indexed, latest versions
- Container images
- 308
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Input Validation in GoGo Protobuf
Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 308 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20160824171236-909568be09de, v0.0.0-20170307180453-100ba4e88506, v1.0.0, v1.1.1+7 more | 1.3.2 | 308 |
- OSV records
- GHSA-c3h9-896r-86jm
- Also known as
- BIT-consul-2021-3121, BIT-protobuf-2021-3121, GO-2021-0053
Charts affected
308 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| ambassadorwenerme | 6.9.5 | 1 of 2See more | 4,086 |
| athens-proxywenerme | 0.5.2 | 1 of 2See more | 4,984 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| temporalwenerme | 0.15.1 | 2 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| version-checkerymrs | 0.2.3 | 1 of 1See more | 3,023 |
Container images carrying it
308 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | f745e2870692 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 198db44fabb5 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 66bbaf95a123 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | e918014fb8d3 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | c4f6c03af5d3 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 64f5eb7a398b | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | f36c423cd259 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | b2666ffcbad8 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 9affab218351 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 8f1bbd5cda85 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | b360d44125ad | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 47f88b18fb7c | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 00ce11c31087 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 087618d16b83 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 8e7b44bbd123 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 0b2a41c2a43e | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 5a10cd095699 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 0fae829caf29 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 119e24f24b1d | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | f681e0343a31 | github.com/ | 1.3.2 | 1 |
| ghcr.io/ | 3491a0f31c4a | github.com/ | 1.3.2 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | github.com/ | 1.3.2 | 1 |
| mcr.microsoft.com/ | f55f30876129 | github.com/ | 1.3.2 | 1 |
| mcr.microsoft.com/ | fc5d14e9f26f | github.com/ | 1.3.2 | 1 |
| mcr.microsoft.com/ | 667b1b1ea1e4 | github.com/ | 1.3.2 | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | 67b89ae52240 | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | 02aed3370fce | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | b32c99e7bc45 | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | cac3ed9a9826 | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | ae59d222fd87 | github.com/ | 1.3.2 | 1 |
| public.ecr.aws/ | efcecf98b912 | github.com/ | 1.3.2 | 1 |
| quay.io/ | cdefc81c6b2e | github.com/ | 1.3.2 | 1 |
| quay.io/ | d6fd2a9e3273 | github.com/ | 1.3.2 | 1 |
| quay.io/ | fe2e2e5a2751 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 9663f06adcb1 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 71cb50263c3b | github.com/ | 1.3.2 | 1 |
| quay.io/ | e045b26eb6df | github.com/ | 1.3.2 | 1 |
| quay.io/ | 4fbd63194674 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 34de6387233b | github.com/ | 1.3.2 | 1 |
| quay.io/ | 6d56f69b15a3 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 21164241c045 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 58cb99053bb3 | github.com/ | 1.3.2 | 1 |
| quay.io/ | a1c3843b03bc | github.com/ | 1.3.2 | 1 |
| quay.io/ | 107a7c73af59 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 6722d5041b47 | github.com/ | 1.3.2 | 1 |
| quay.io/ | 0290e7b2800a | github.com/ | 1.3.2 | 1 |
| quay.io/ | 6ba82beff18e | github.com/ | 1.3.2 | 1 |
| quay.io/ | 87f0398ec7ff | github.com/ | 1.3.2 | 1 |
| quay.io/ | e362f02ed304 | github.com/ | 1.3.2 | 1 |