StackRadar

CVE-2021-3121

High

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
308
deployed by those charts
Fix available
1 of 1
affected package

Improper Input Validation in GoGo Protobuf

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 308 images.

Affected packageAffected versionsFixed inImages
github.com/gogo/protobufgolangv0.0.0-20160824171236-909568be09de, v0.0.0-20170307180453-100ba4e88506, v1.0.0, v1.1.1+7 more1.3.2308
OSV records
GHSA-c3h9-896r-86jm
Also known as
BIT-consul-2021-3121, BIT-protobuf-2021-3121, GO-2021-0053

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
keptncontrib/prometheus-service:0.6.029969dd547de
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

10,621
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

9,661
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

7,342
nfs-subdir-external-provisionerbook-k8sinfra-v24.0.181 of 1See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,743
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

6,389
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
github.com/gogo/protobuf@v1.3.1
1.3.2
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

7,776
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

8,408
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,821
sloopchristianhuthVerified publisher0.4.01 of 1See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

2,290
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
github.com/gogo/protobuf@v1.2.2-0.20190730201129-28a6bbf47e48
1.3.2

Open the chart page →

3,595
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

20,900
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

6,921
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,136
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

16,069
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

14,270
proxyinjectorcloudve0.0.231 of 1See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

2,853
kovecmacraeVerified publisher0.2.01 of 1See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.2.0185bfaae750c
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,089
kove-deprecationscmacraeVerified publisher0.1.21 of 1See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,203
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

8,408
katibcowboysysopVerified publisher2.4.22 of 4See more

katib cowboysysop 2.4.2

2 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/gogo/protobuf@v1.3.1
1.3.2
kubeflowkatib/katib-ui:v0.12.0129f0aaba976
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

6,542
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,830
mpi-operatorcowboysysopVerified publisher1.2.21 of 1See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,577
notebook-controllercowboysysopVerified publisher1.1.21 of 1See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

2,582
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,275
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,312
oam-kubernetes-runtimecrossplane0.0.3-71.g0f235901 of 2See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,248
oam-kubernetes-runtime-legacycrossplane0.3.1-5.g11e18941 of 1See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,231
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

4,624
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

5,973
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

13,852
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,977
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

2,806
datadog-csi-driverdatadogVerified publisher0.17.01 of 2See more

datadog-csi-driver datadog 0.17.0

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

2,040
datadog-operatordatadog-test0.1.21 of 1See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
datadog/operator:0.3.117f08a860090
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,980
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

7,486
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2

Open the chart page →

2,468
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/gogo/protobuf@v1.3.1
1.3.2
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

10,466
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

5,039
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/gogo/protobuf@v1.3.1
1.3.2
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

10,466
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

5,039
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/gogo/protobuf@v1.3.1
1.3.2

Open the chart page →

3,046
overlorddoubanVerified publisher0.2.21 of 1See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-3121.

Container imageDigestPackageFixed in
douz/overlord:latestf2bc7fc068c1
github.com/gogo/protobuf@v1.2.1
1.3.2

Open the chart page →

3,693

Container images carrying it

308 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/tigera/operator:v1.20.1379efe0c2541
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/tigera/operator:v1.15.1c6591da87aa8
github.com/gogo/protobuf@v1.3.1
1.3.2
1
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
github.com/gogo/protobuf@v1.2.2-0.20190723190241-65acae22fc9d
1.3.2
1
quay.io/uswitch/kiam:v4.0be3a5846922d
github.com/gogo/protobuf@v1.2.1
1.3.2
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
github.com/gogo/protobuf@v1.3.1
1.3.2
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
github.com/gogo/protobuf@v1.3.1
1.3.2
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
github.com/gogo/protobuf@v1.3.1
1.3.2
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
github.com/gogo/protobuf@v1.3.1
1.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.