StackRadar

CVE-2021-38561

High

Advisory

Published 6 Oct 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
664
of 17,787 indexed, latest versions
Container images
682
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text/language Out-of-bounds Read vulnerability

Carried by container images the latest versions of 664 of 17,787 indexed charts deploy, on 682 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+6 more0.3.7682
OSV records
GHSA-ppp9-7jff-5vj2
Also known as
GO-2021-0113

Charts affected

664 by stars
ChartLatestAffected imagesRadar Score
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

15,230
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

6,915
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,743
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/text@v0.3.2
0.3.7
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.3.7
prom/prometheus:v2.16.0e4ca62c0d62f
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,369
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,745
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

12,606
dex-k8s-authenticatorwiremindVerified publisher1.7.01 of 1See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/text@v0.3.0
0.3.7

Open the chart page →

2,791
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,616
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
golang.org/x/text@v0.3.5
0.3.7
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
golang.org/x/text@v0.3.5
0.3.7

Open the chart page →

7,972
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

3,023
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

5,033

Container images carrying it

682 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:7.3.315b977f5207d
golang.org/x/text@v0.3.3
0.3.7
1
grafana/grafana:8.0.3696823fbc561
golang.org/x/text@v0.3.6
0.3.7
1
grafana/grafana:7.3.46d42886b3ebe
golang.org/x/text@v0.3.3
0.3.7
1
grafana/grafana:7.2.1733842cca5bd
golang.org/x/text@v0.3.3
0.3.7
1
grafana/grafana:6.5.1befcd84da2c1
golang.org/x/text@v0.3.2
0.3.7
1
grafana/grafana:7.4.5d322192ed2fa
golang.org/x/text@v0.3.3
0.3.7
1
grafana/kubernetes-diff-logger:0.0.598f6d1cd1e25
golang.org/x/text@v0.3.6
0.3.7
1
grafana/logcli:main-c90366d-amd643d85bb66e39b
golang.org/x/text@v0.3.6
0.3.7
1
grafana/loki:2.0.077e138f81a8e
golang.org/x/text@v0.3.3
0.3.7
1
grafana/promtail:2.0.05fd12edcc694
golang.org/x/text@v0.3.3
0.3.7
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
golang.org/x/text@v0.3.2
0.3.7
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/text@v0.3.2
0.3.7
1
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/text@v0.3.6
0.3.7
1
hashicorp/vault:1.8.4dfc3500beb0e
golang.org/x/text@v0.3.6
0.3.7
1
hashicorp/vault-k8s:0.6.05697b85bc69a
golang.org/x/text@v0.3.1-0.20181227161524-e6919f6577db
0.3.7
1
hashicorp/vault-k8s:0.14.0aff47b5ba39c
golang.org/x/text@v0.3.6
0.3.7
1
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
golang.org/x/text@v0.3.3
0.3.7
1
hetznercloud/hcloud-csi-driver:1.6.01475d525f9a4
golang.org/x/text@v0.3.4
0.3.7
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
golang.org/x/text@v0.3.3
0.3.7
1
hhyo/archery:v1.9.11aa41843419e
golang.org/x/text@v0.3.4
0.3.7
1
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
golang.org/x/text@v0.3.3
0.3.7
1
hyperledger/fabric-ca:1.5.0f270dfeee91d
golang.org/x/text@v0.3.3
0.3.7
1
hyperledger/fabric-orderer:2.2.137294e05209b
golang.org/x/text@v0.3.2
0.3.7
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
golang.org/x/text@v0.3.2
0.3.7
1
ianw/quickchart:v1.7.1dc49dd460c37
golang.org/x/text@v0.3.0
0.3.7
1
inseefrlab/shelly:cloudshell31f04ca7436b
golang.org/x/text@v0.3.5
0.3.7
1
intel/intel-gpu-plugin:0.20.0143f0a45e174
golang.org/x/text@v0.3.4
0.3.7
1
intel/multimodal-data-visualization:3.03426deb77337
golang.org/x/text@v0.3.6
0.3.7
1
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/text@v0.3.4
0.3.7
1
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/text@v0.3.4
0.3.7
1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/text@v0.3.4
0.3.7
1
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/text@v0.3.4
0.3.7
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
golang.org/x/text@v0.3.2
0.3.7
1
istio/install-cni:1.10.32232f365aed6
golang.org/x/text@v0.3.5
0.3.7
1
istio/operator:1.10.3655eefa11c84
golang.org/x/text@v0.3.5
0.3.7
1
istio/operator:1.12.06cfce8a071b9
golang.org/x/text@v0.3.6
0.3.7
1
istio/pilot:1.10.0294ca55bd1cc
golang.org/x/text@v0.3.5
0.3.7
1
istio/pilot:1.10.3e7e110a421c2
golang.org/x/text@v0.3.5
0.3.7
1
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/text@v0.3.4
0.3.7
1
istio/proxyv2:1.10.088c6c693e67a
golang.org/x/text@v0.3.5
0.3.7
1
itzmanish/ecr-token-renew:latest02154d1c05b5
golang.org/x/text@v0.3.6
0.3.7
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
golang.org/x/text@v0.3.6
0.3.7
1
jaegertracing/all-in-one:1.22.0ca6b73330616
golang.org/x/text@v0.3.5
0.3.7
1
jaegertracing/all-in-one:1.18db45c07f2e1b
golang.org/x/text@v0.3.2
0.3.7
1
jfwenisch/alpine-tor:latest9e6c229f953c
golang.org/x/text@v0.3.0
0.3.7
1
jmferrer/azure-devops-agent:latest030f68ec6998
golang.org/x/text@v0.3.2
0.3.7
1
joeelliott/cert-exporter:v2.7.0b4acd14642d0
golang.org/x/text@v0.3.2
0.3.7
1
k8scloudprovider/octavia-ingress-controller:v1.20.26ddf80b34265
golang.org/x/text@v0.3.4
0.3.7
1
keptncontrib/prometheus-service:0.6.029969dd547de
golang.org/x/text@v0.3.2
0.3.7
1
keptn/distributor:0.8.36bc3df9e0d6a
golang.org/x/text@v0.3.5
0.3.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.