cve/2021/CVE-2021-3121.md

### [CVE-2021-3121](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3121)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/De30/osv-scanner
- https://github.com/anmalkov/osv-scanner
- https://github.com/godepsresolve/gomodtrace
- https://github.com/google/osv-scanner
- https://github.com/k1LoW/oshka
- https://github.com/kyverno/policy-reporter-plugins
- https://github.com/sonatype-nexus-community/nancy