StackRadar

CVE-2021-3121

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
308
deployed by those charts
Fix available
1 of 1
affected package

Improper Input Validation in GoGo Protobuf

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 308 images.

Affected packageAffected versionsFixed inImages
github.com/gogo/protobufgolangv0.0.0-20160824171236-909568be09de, v0.0.0-20170307180453-100ba4e88506, v1.0.0, v1.1.1+7 more1.3.2308
OSV records
GHSA-c3h9-896r-86jm
Also known as
BIT-consul-2021-3121, BIT-protobuf-2021-3121, GO-2021-0053

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

4,086
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
github.com/gogo/protobuf@v1.2.0
1.3.2

Open the chart page →

4,984
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

6,915
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,743
temporalwenerme0.15.12 of 13See more

temporal wenerme 0.15.1

2 of the 13 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2
prom/prometheus:v2.16.0e4ca62c0d62f
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gogo/protobuf@v1.3.0
1.3.2

Open the chart page →

3,369
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

12,606
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,023

Container images carrying it

308 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
github.com/gogo/protobuf@v1.2.1
1.3.2
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/gogo/protobuf@v1.3.1
1.3.2
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/gogo/protobuf@v1.3.1
1.3.2
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
github.com/gogo/protobuf@v1.3.1
1.3.2
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
github.com/gogo/protobuf@v1.3.1
1.3.2
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
github.com/gogo/protobuf@v1.3.1
1.3.2
1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller:1.067b89ae52240
github.com/gogo/protobuf@v1.3.1
1.3.2
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-2021.08.13.20.34-linux-amd6402aed3370fce
github.com/gogo/protobuf@v1.3.1
1.3.2
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
github.com/gogo/protobuf@v1.3.1
1.3.2
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
github.com/gogo/protobuf@v1.2.1
1.3.2
1
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
github.com/gogo/protobuf@v1.3.1
1.3.2
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/gogo/protobuf@v1.2.1
1.3.2
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/kube-ops/loki:2.2.14fbd63194674
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/metallb/controller:v0.10.221164241c045
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/metallb/speaker:v0.10.258cb99053bb3
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/rimusz/hostpath-provisioner:v0.2.587f0398ec7ff
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/thanos/thanos:v0.17.1e362f02ed304
github.com/gogo/protobuf@v1.3.1
1.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.