CVE-2021-3121

CVE-2021-3121 is a high-severity vulnerability affecting GoGo Protobuf versions prior to 1.3.2, specifically impacting products like HashiCorp Consul and golang protobuf due to a missing index validation in plugin/unmarshal/unmarshal.go. This flaw, dubbed "skippy peanut butter," allows for remote exploitation with low attack complexity, potentially leading to partial confidentiality, integrity, and complete availability compromise. While rated 8.6 CVSS, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.