StackRadar

CVE-2021-38561

High

Advisory

Published 6 Oct 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
664
of 17,781 indexed, latest versions
Container images
682
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text/language Out-of-bounds Read vulnerability

Carried by container images the latest versions of 664 of 17,781 indexed charts deploy, on 682 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+6 more0.3.7682
OSV records
GHSA-ppp9-7jff-5vj2
Also known as
GO-2021-0113

Charts affected

664 by stars
ChartLatestAffected imagesRadar Score
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

15,230
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

6,915
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,743
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/text@v0.3.2
0.3.7
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.3.7
prom/prometheus:v2.16.0e4ca62c0d62f
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,745
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

12,606
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/text@v0.3.0
0.3.7

Open the chart page →

2,791
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,616
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
golang.org/x/text@v0.3.5
0.3.7
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
golang.org/x/text@v0.3.5
0.3.7

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

5,033

Container images carrying it

682 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
golang.org/x/text@v0.3.2
0.3.7
2
crate/crate_adapter:latestb8d89fa5d19b
golang.org/x/text@v0.3.6
0.3.7
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/text@v0.3.2
0.3.7
2
datawire/aes:1.14.48588eafe6862
golang.org/x/text@v0.3.4
0.3.7
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
golang.org/x/text@v0.3.5
0.3.7
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/text@v0.3.6
0.3.7
2
gotson/komga:1.26.36c2a967bbe9a
golang.org/x/text@v0.3.6
0.3.7
2
governify/dashboard:lateste83a17ba5038
golang.org/x/text@v0.3.6
0.3.7
2
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/text@v0.3.3
0.3.7
2
grafana/loki:1.5.0922b3f412fdd
golang.org/x/text@v0.3.2
0.3.7
2
grafana/promtail:1.5.046e88d390cd6
golang.org/x/text@v0.3.2
0.3.7
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/text@v0.3.2
0.3.7
2
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/text@v0.3.6
0.3.7
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
golang.org/x/text@v0.3.6
0.3.7
2
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/text@v0.3.3
0.3.7
2
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/text@v0.3.6
0.3.7
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/text@v0.3.2
0.3.7
2
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/text@v0.3.4
0.3.7
2
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/text@v0.3.5
0.3.7
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/text@v0.3.0
0.3.7
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/text@v0.3.3
0.3.7
2
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/text@v0.3.5
0.3.7
2
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
golang.org/x/text@v0.3.6
0.3.7
2
library/traefik:v2.57d5a6ae66572
golang.org/x/text@v0.3.6
0.3.7
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/text@v0.3.3
0.3.7
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/text@v0.3.3
0.3.7
2
minio/operator:v4.3.754393e03f3b2
golang.org/x/text@v0.3.6
0.3.7
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/text@v0.3.5
0.3.7
2
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/text@v0.3.2
0.3.7
2
phntom/kochi:1.1.33b82358bd56e
golang.org/x/text@v0.3.3
0.3.7
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/text@v0.3.3
0.3.7
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/text@v0.3.2
0.3.7
2
prom/prometheus:v2.17.242d2395cd719
golang.org/x/text@v0.3.2
0.3.7
2
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/text@v0.3.2
0.3.7
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
golang.org/x/text@v0.3.6
0.3.7
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
golang.org/x/text@v0.3.3
0.3.7
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/text@v0.3.2
0.3.7
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/text@v0.3.3
0.3.7
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2
0.3.7
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2
0.3.7
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/text@v0.3.2
0.3.7
2
tkpd/gripmock:1.10.174441dadcfbd
golang.org/x/text@v0.3.4
0.3.7
2
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/text@v0.3.6
0.3.7
2
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/text@v0.3.6
0.3.7
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/text@v0.3.0
0.3.7
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/text@v0.3.2
0.3.7
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/text@v0.3.3
0.3.7
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/text@v0.3.6
0.3.7
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/text@v0.3.6
0.3.7
2
ghcr.io/cubed-it/inlets:4.0.0f02325f099bc
golang.org/x/text@v0.3.4
0.3.7
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.