Snyk - Open Source Security

Snyk test report

May 26th 2024, 12:18:19 am (UTC+00:00)

Scanned the following paths:
  • /argo-cd/argoproj/argo-cd/v2/go.mod (gomodules)
  • /argo-cd/ui/yarn.lock (yarn)
8 known vulnerabilities
164 vulnerable dependency paths
2041 dependencies

Allocation of Resources Without Limits or Throttling

high severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Vulnerable module: golang.org/x/net/http2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, k8s.io/apimachinery/pkg/util/net@0.26.11 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/soheilhy/cmux@0.1.5 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/auth@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/retry@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-prometheus@1.2.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.21.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.46.1 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/rbac/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/errors@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/equality@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/reflection@1.59.0 › google.golang.org/grpc/reflection/grpc_reflection_v1alpha@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health@1.59.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.26.11 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.14.7 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.14.7 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.26.11 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/testing@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/strategicpatch@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.14.7 › sigs.k8s.io/controller-runtime/pkg/scheme@0.14.7 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/resource@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/util/retry@0.26.11 › k8s.io/apimachinery/pkg/api/errors@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/managedfields@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/portforward@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1@0.26.11 › k8s.io/apimachinery/pkg/api/equality@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/validation@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/validation@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.14.7 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.14.7 › sigs.k8s.io/controller-runtime/pkg/internal/testing/controlplane@0.14.7 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/diff@#fbecbb86e412 › k8s.io/apimachinery/pkg/util/strategicpatch@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.26.11 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.26.11 › k8s.io/client-go/tools/reference@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.26.11 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.26.11 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.26.11 › k8s.io/client-go/applyconfigurations/storage/v1beta1@0.26.11 › k8s.io/client-go/applyconfigurations/meta/v1@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/clientcmd/api/latest@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.14.7 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.14.7 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/diff@#fbecbb86e412 › k8s.io/kubectl/pkg/cmd/util@0.26.11 › k8s.io/kubectl/pkg/validation@0.26.11 › k8s.io/cli-runtime/pkg/resource@0.26.11 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/admission@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.14.7 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.14.7 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.14.7 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/clientcmd/api/latest@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.26.11 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube/scheme@#fbecbb86e412 › k8s.io/kubernetes/pkg/apis/storage/install@1.26.11 › k8s.io/kubernetes/pkg/apis/storage/v1alpha1@1.26.11 › k8s.io/api/storage/v1alpha1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.14.7 › sigs.k8s.io/controller-runtime/pkg/manager@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.14.7 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.14.7 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0

Overview

golang.org/x/net/http2 is a work-in-progress HTTP/2 implementation for Go.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when reading header data from CONTINUATION frames. As part of the HPACK flow, all incoming HEADERS and CONTINUATION frames are read even if their payloads exceed MaxHeaderBytes and will be discarded. An attacker can send excessive data over a connection to render it unresponsive.

Remediation

Upgrade golang.org/x/net/http2 to version 0.23.0 or higher.

References

More about this vulnerability

LGPL-3.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: gopkg.in/retry.v1
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/Azure/kubelogin/pkg/token@0.0.20 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › gopkg.in/retry.v1@1.0.3

LGPL-3.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: github.com/r3labs/diff
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/r3labs/diff@1.1.0

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/r3labs/diff@1.1.0

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: github.com/hashicorp/go-version
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, code.gitea.io/sdk/gitea@0.15.1 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › code.gitea.io/sdk/gitea@0.15.1 › github.com/hashicorp/go-version@1.2.1

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: github.com/hashicorp/go-retryablehttp
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/hashicorp/go-retryablehttp@0.7.4

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: github.com/hashicorp/go-cleanhttp
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/hashicorp/go-retryablehttp@0.7.4 and others

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2

MPL-2.0 license

More about this vulnerability

MPL-2.0 license

medium severity
  • Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
  • Package Manager: golang
  • Module: github.com/gosimple/slug
  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/gosimple/slug@1.13.1

Detailed paths

  • Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/gosimple/slug@1.13.1

MPL-2.0 license

More about this vulnerability

Template Injection

medium severity
  • Manifest file: /argo-cd › ui/yarn.lock
  • Package Manager: npm
  • Vulnerable module: dompurify
  • Introduced through: argo-cd-ui@1.0.0, redoc@2.0.0-rc.64 and others

Detailed paths

  • Introduced through: argo-cd-ui@1.0.0 › redoc@2.0.0-rc.64 › dompurify@2.3.6

Overview

dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG.

Affected versions of this package are vulnerable to Template Injection in purify.js, due to inconsistencies in the parsing of XML and HTML tags. Executable code can be injected in HTML inside XML CDATA blocks.

PoC

<![CDATA[ ><img src onerror=alert(1)> ]]>

Remediation

Upgrade dompurify to version 2.4.9, 3.0.11 or higher.

References

More about this vulnerability