CVE-2021-3121 is missing from the advisory database, which means Dependabot is not offering updates for it. https://nvd.nist.gov/vuln/detail/CVE-2021-3121 https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOGOPROTOBUFPLUGINUNMARSHAL-1058921