{
  "cveId": "CVE-2021-3121",
  "url": "https://patchblox.com/security/cve/CVE-2021-3121",
  "summary": "CVE-2021-3121 is fixed in 4 products on 1 platform, first by gogoprotobuf 1.3.2-1, released January 10, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "gogoprotobuf: An issue was discovered in GoGo Protobuf before 1.3.2.plugin/unmarshal/unmarshal.go lacks certain index validation, a...",
  "description": "An issue was discovered in GoGo Protobuf before 1.3.2.plugin/unmarshal/unmarshal.go lacks certain index validation, aka the\u0022skippy peanut butter\u0022 issue.",
  "published": "2021-01-10T22:15:00Z",
  "severity": "Medium",
  "epss": 0.03425,
  "epssPercentile": 0.88995,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "gogoprotobuf",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.3.2-1",
      "fix": "gogoprotobuf 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-gogoprotobuf-1.3.2-1",
      "released": "2021-01-10T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "gogoprotobuf",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1.3.2-1",
      "fix": "gogoprotobuf 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-gogoprotobuf-1.3.2-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "gogoprotobuf",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.3.2-1",
      "fix": "gogoprotobuf 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-gogoprotobuf-1.3.2-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "golang-github-gogo-protobuf-dev",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.3.2-1",
      "fix": "golang-github-gogo-protobuf-dev 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-golang-github-gogo-protobuf-dev-1.3.2-1",
      "released": "2021-01-10T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "golang-gogoprotobuf-dev",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.3.2-1",
      "fix": "golang-gogoprotobuf-dev 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-golang-gogoprotobuf-dev-1.3.2-1",
      "released": "2021-01-10T22:15:00Z"
    },
    {
      "platform": "linux",
      "product": "golang-gogoprotobuf-dev",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1.3.2-1",
      "fix": "golang-gogoprotobuf-dev 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-golang-gogoprotobuf-dev-1.3.2-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "golang-gogoprotobuf-dev",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.3.2-1",
      "fix": "golang-gogoprotobuf-dev 1.3.2-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-golang-gogoprotobuf-dev-1.3.2-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "kubernetes1.18",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.18.20-150200.5.25.1",
      "fix": "SUSE-SU-2025:02977-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02977-1",
      "released": "2025-08-25T12:18:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}