Snyk - Open Source Security

Snyk test report

October 29th 2023, 12:18:17 am (UTC+00:00)

Scanned the following paths:
  • /argo-cd/argoproj/argo-cd/v2 (gomodules)
  • /argo-cd (yarn)
8 known vulnerabilities
167 vulnerable dependency paths
1920 dependencies

Denial of Service (DoS)

high severity
  • Package Manager: golang
  • Vulnerable module: google.golang.org/grpc
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and google.golang.org/grpc@1.56.2

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/reflection@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/auth@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/retry@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-prometheus@1.2.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.16.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.42.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/auth@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.16.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal/otlpconfig@1.16.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.16.0 › go.opentelemetry.io/proto/otlp/collector/trace/v1@0.19.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/reflection@1.56.2 › google.golang.org/grpc/reflection/grpc_reflection_v1alpha@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health@1.56.2 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.16.0 › go.opentelemetry.io/proto/otlp/collector/trace/v1@0.19.0 › github.com/grpc-ecosystem/grpc-gateway/v2/runtime@2.11.3 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2

Overview

google.golang.org/grpc is a Go implementation of gRPC

Affected versions of this package are vulnerable to Denial of Service (DoS) in the implementation of the HTTP/2 protocol. An attacker can cause a denial of service (including via DDoS) by rapidly resetting many streams through request cancellation.

Remediation

Upgrade google.golang.org/grpc to version 1.56.3, 1.57.1, 1.58.3 or higher.

References

More about this vulnerability

Denial of Service (DoS)

high severity
  • Package Manager: golang
  • Vulnerable module: golang.org/x/net/http2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, k8s.io/apimachinery/pkg/util/net@0.24.2 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/soheilhy/cmux@0.1.5 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/auth@1.4.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/retry@1.4.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-prometheus@1.2.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.16.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.42.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.24.2 › k8s.io/client-go/tools/auth@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#9dcecdc3eebf › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.24.2 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.24.2 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.24.2 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/rbac/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/errors@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/equality@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/reflection@1.56.2 › google.golang.org/grpc/reflection/grpc_reflection_v1alpha@1.56.2 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health@1.56.2 › google.golang.org/grpc/health/grpc_health_v1@1.56.2 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#9dcecdc3eebf › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#9dcecdc3eebf › k8s.io/client-go/tools/clientcmd@0.24.2 › k8s.io/client-go/tools/auth@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.24.2 › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.24.2 › k8s.io/client-go/tools/remotecommand@0.24.2 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/managedfields@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/resource@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/testing@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.11.0 › sigs.k8s.io/controller-runtime/pkg/scheme@0.11.0 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/resource@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/util/retry@0.24.2 › k8s.io/apimachinery/pkg/api/errors@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/portforward@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1@0.24.2 › k8s.io/apimachinery/pkg/api/equality@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/validation@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/validation@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.24.2 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.24.2 › k8s.io/client-go/testing@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.24.2 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.11.0 › k8s.io/client-go/restmapper@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.11.0 › sigs.k8s.io/controller-runtime/pkg/internal/testing/controlplane@0.11.0 › k8s.io/client-go/tools/clientcmd@0.24.2 › k8s.io/client-go/tools/auth@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/diff@#b0fffe419a0f › k8s.io/apimachinery/pkg/util/managedfields@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/resource@#b0fffe419a0f › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/runtime/serializer@0.24.2 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.24.2 › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.24.2 › k8s.io/client-go/tools/reference@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#9dcecdc3eebf › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.24.2 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#9dcecdc3eebf › k8s.io/client-go/listers/core/v1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.24.2 › k8s.io/client-go/tools/remotecommand@0.24.2 › k8s.io/client-go/transport/spdy@0.24.2 › k8s.io/client-go/rest@0.24.2 › k8s.io/client-go/transport@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.56.2 › google.golang.org/grpc/internal/transport@1.56.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.11.0 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.24.2 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.24.2 › k8s.io/client-go/applyconfigurations/storage/v1beta1@0.24.2 › k8s.io/client-go/applyconfigurations/meta/v1@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook/admission@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.11.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.24.2 › k8s.io/client-go/tools/clientcmd/api/latest@0.24.2 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/common@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/common@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.11.0 › sigs.k8s.io/controller-runtime/pkg/manager@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.11.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.11.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.11.0 › k8s.io/apimachinery/pkg/runtime/serializer@0.24.2 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.11.0 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.11.0 › k8s.io/apimachinery/pkg/runtime/serializer@0.24.2 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#9dcecdc3eebf › k8s.io/client-go/tools/clientcmd@0.24.2 › k8s.io/client-go/tools/clientcmd/api/latest@0.24.2 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.24.2 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube/scheme@#b0fffe419a0f › k8s.io/kubernetes/pkg/apis/storage/install@1.24.2 › k8s.io/kubernetes/pkg/apis/storage/v1alpha1@1.24.2 › k8s.io/api/storage/v1alpha1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/hook@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/sync/common@#b0fffe419a0f › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.11.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/client-go/rest@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#b0fffe419a0f › k8s.io/kubectl/pkg/util/openapi@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.11.0 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.11.0 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.11.0 › k8s.io/client-go/tools/cache@0.24.2 › k8s.io/client-go/tools/pager@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.11.0 › k8s.io/client-go/restmapper@0.24.2 › k8s.io/client-go/discovery@0.24.2 › k8s.io/client-go/kubernetes/scheme@0.24.2 › k8s.io/api/storage/v1beta1@0.24.2 › k8s.io/api/core/v1@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.11.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source@0.11.0 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.11.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.11.0 › sigs.k8s.io/controller-runtime/pkg/event@0.11.0 › sigs.k8s.io/controller-runtime/pkg/client@0.11.0 › k8s.io/client-go/dynamic@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.24.2 › k8s.io/apimachinery/pkg/apis/meta/v1@0.24.2 › k8s.io/apimachinery/pkg/watch@0.24.2 › k8s.io/apimachinery/pkg/util/net@0.24.2 › golang.org/x/net/http2@0.15.0

Overview

golang.org/x/net/http2 is a work-in-progress HTTP/2 implementation for Go.

Affected versions of this package are vulnerable to Denial of Service (DoS) in the implementation of the HTTP/2 protocol. An attacker can cause a denial of service (including via DDoS) by rapidly resetting many streams through request cancellation.

Remediation

Upgrade golang.org/x/net/http2 to version 0.17.0 or higher.

References

More about this vulnerability

LGPL-3.0 license

medium severity
  • Package Manager: golang
  • Module: gopkg.in/retry.v1
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/Azure/kubelogin/pkg/token@0.0.20 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › gopkg.in/retry.v1@1.0.3

LGPL-3.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Package Manager: golang
  • Module: github.com/r3labs/diff
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/r3labs/diff@1.1.0

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/r3labs/diff@1.1.0

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Package Manager: golang
  • Module: github.com/hashicorp/go-version
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, code.gitea.io/sdk/gitea@0.15.1 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › code.gitea.io/sdk/gitea@0.15.1 › github.com/hashicorp/go-version@1.2.1

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Package Manager: golang
  • Module: github.com/hashicorp/go-retryablehttp
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/hashicorp/go-retryablehttp@0.7.4

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Package Manager: golang
  • Module: github.com/hashicorp/go-cleanhttp
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/hashicorp/go-retryablehttp@0.7.4 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/subscriptions@#9dcecdc3eebf › github.com/argoproj/notifications-engine/pkg/services@#9dcecdc3eebf › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Package Manager: golang
  • Module: github.com/gosimple/slug
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/gosimple/slug@1.13.1

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/gosimple/slug@1.13.1

MPL-2.0 license

More about this vulnerability