# Snyk test report

June 9th 2024, 12:19:42 am (UTC+00:00)

Scanned the following paths:

- /argo-cd/argoproj/argo-cd/v2/go.mod (gomodules)
- /argo-cd/ui/yarn.lock (yarn)

8 known vulnerabilities
164 vulnerable dependency paths
2041 dependencies

## Allocation of Resources Without Limits or Throttling

high severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Vulnerable module: golang.org/x/net/http2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, k8s.io/apimachinery/pkg/util/net@0.26.11 and others

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/soheilhy/cmux@0.1.5 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/auth@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/retry@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-prometheus@1.2.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.21.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.46.1 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/rbac/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/errors@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/equality@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/pkg/kubeclientmetrics@#d56162821bd1 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/azure@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/gcp@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/plugin/pkg/client/auth/oidc@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/improbable-eng/grpc-web/go/grpcweb@0.15.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/reflection@1.59.0 › google.golang.org/grpc/reflection/grpc_reflection_v1alpha@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › google.golang.org/grpc/health@1.59.0 › google.golang.org/grpc/health/grpc_health_v1@1.59.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.26.11 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.14.7 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.14.7 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.26.11 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › k8s.io/client-go/pkg/apis/clientauthentication/v1beta1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/testing@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/strategicpatch@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.14.7 › sigs.k8s.io/controller-runtime/pkg/scheme@0.14.7 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/resource@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/util/retry@0.26.11 › k8s.io/apimachinery/pkg/api/errors@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/util/managedfields@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/portforward@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1@0.26.11 › k8s.io/apimachinery/pkg/api/equality@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/api/validation@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/validation@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/fake@0.26.11 › k8s.io/client-go/testing@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/health@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.14.7 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.14.7 › sigs.k8s.io/controller-runtime/pkg/internal/testing/controlplane@0.14.7 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/auth@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/diff@#fbecbb86e412 › k8s.io/apimachinery/pkg/util/strategicpatch@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/core/v1@0.26.11 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/record@0.26.11 › k8s.io/client-go/tools/reference@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers/apps/v1@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/informers@0.26.11 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/term@0.26.11 › k8s.io/client-go/tools/remotecommand@0.26.11 › k8s.io/client-go/transport/spdy@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › k8s.io/client-go/transport@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags/logrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/logging/logrus/ctxlogrus@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware/tags@1.4.0 › github.com/grpc-ecosystem/go-grpc-middleware@1.4.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › k8s.io/client-go/listers/core/v1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.26.11 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.26.11 › k8s.io/client-go/applyconfigurations/storage/v1beta1@0.26.11 › k8s.io/client-go/applyconfigurations/meta/v1@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/clientcmd/api/latest@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/event@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/cache@0.14.7 › sigs.k8s.io/controller-runtime/pkg/cache/internal@0.14.7 › k8s.io/client-go/tools/cache@0.26.11 › k8s.io/client-go/tools/pager@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/diff@#fbecbb86e412 › k8s.io/kubectl/pkg/cmd/util@0.26.11 › k8s.io/kubectl/pkg/validation@0.26.11 › k8s.io/cli-runtime/pkg/resource@0.26.11 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/syncwaves@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/admission@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.14.7 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/builder@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.14.7 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/envtest@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/conversion@0.14.7 › k8s.io/apimachinery/pkg/runtime/serializer@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › k8s.io/client-go/tools/clientcmd@0.26.11 › k8s.io/client-go/tools/clientcmd/api/latest@0.26.11 › k8s.io/apimachinery/pkg/runtime/serializer/versioning@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › k8s.io/client-go/kubernetes@0.26.11 › k8s.io/client-go/kubernetes/typed/storage/v1beta1@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube/scheme@#fbecbb86e412 › k8s.io/kubernetes/pkg/apis/storage/install@1.26.11 › k8s.io/kubernetes/pkg/apis/storage/v1alpha1@1.26.11 › k8s.io/api/storage/v1alpha1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/handler@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync/ignore@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/hook/helm@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/sync/common@#fbecbb86e412 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime@0.14.7 › sigs.k8s.io/controller-runtime/pkg/manager@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook@0.14.7 › sigs.k8s.io/controller-runtime/pkg/webhook/internal/metrics@0.14.7 › sigs.k8s.io/controller-runtime/pkg/metrics@0.14.7 › k8s.io/client-go/tools/leaderelection@0.26.11 › k8s.io/client-go/tools/leaderelection/resourcelock@0.26.11 › k8s.io/client-go/rest@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › google.golang.org/api/chat/v1@0.132.0 › google.golang.org/api/transport/http@0.132.0 › google.golang.org/api/option@0.132.0 › google.golang.org/grpc@1.59.0 › google.golang.org/grpc/internal/transport@1.59.0 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/cache@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/sync@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/gitops-engine/pkg/utils/kube@#fbecbb86e412 › k8s.io/kubectl/pkg/util/openapi@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller/controllerutil@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client/apiutil@0.14.7 › k8s.io/client-go/restmapper@0.26.11 › k8s.io/client-go/discovery@0.26.11 › k8s.io/client-go/kubernetes/scheme@0.26.11 › k8s.io/api/storage/v1beta1@0.26.11 › k8s.io/api/core/v1@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › sigs.k8s.io/controller-runtime/pkg/controller@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source@0.14.7 › sigs.k8s.io/controller-runtime/pkg/source/internal@0.14.7 › sigs.k8s.io/controller-runtime/pkg/predicate@0.14.7 › sigs.k8s.io/controller-runtime/pkg/runtime/inject@0.14.7 › sigs.k8s.io/controller-runtime/pkg/client@0.14.7 › k8s.io/client-go/dynamic@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1/unstructured@0.26.11 › k8s.io/apimachinery/pkg/apis/meta/v1@0.26.11 › k8s.io/apimachinery/pkg/watch@0.26.11 › k8s.io/apimachinery/pkg/util/net@0.26.11 › golang.org/x/net/http2@0.19.0

## Overview

golang.org/x/net/http2 is a work-in-progress HTTP/2 implementation for Go.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when reading header data from `CONTINUATION` frames. As part of the HPACK flow, all incoming `HEADERS` and `CONTINUATION` frames are read even if their payloads exceed `MaxHeaderBytes` and will be discarded. An attacker can send excessive data over a connection to render it unresponsive.

## Remediation

Upgrade `golang.org/x/net/http2` to version 0.23.0 or higher.

## References

- Github Commit
- GitHub Commit
- GitHub Issue
- Go Advisory

More about this vulnerability

## LGPL-3.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: gopkg.in/retry.v1
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/Azure/kubelogin/pkg/token@0.0.20 and others

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/Azure/kubelogin/pkg/token@0.0.20 › gopkg.in/retry.v1@1.0.3

LGPL-3.0 license

More about this vulnerability

## MPL-2.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: github.com/r3labs/diff
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/r3labs/diff@1.1.0

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/r3labs/diff@1.1.0

MPL-2.0 license

More about this vulnerability

## MPL-2.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: github.com/hashicorp/go-version
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, code.gitea.io/sdk/gitea@0.15.1 and others

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › code.gitea.io/sdk/gitea@0.15.1 › github.com/hashicorp/go-version@1.2.1

MPL-2.0 license

More about this vulnerability

## MPL-2.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: github.com/hashicorp/go-retryablehttp
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/hashicorp/go-retryablehttp@0.7.4

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4

MPL-2.0 license

More about this vulnerability

## MPL-2.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: github.com/hashicorp/go-cleanhttp
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0, github.com/hashicorp/go-retryablehttp@0.7.4 and others

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/xanzy/go-gitlab@0.91.1 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/cmd@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/api@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/argoproj/notifications-engine/pkg/controller@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/subscriptions@#f48567108f01 › github.com/argoproj/notifications-engine/pkg/services@#f48567108f01 › github.com/opsgenie/opsgenie-go-sdk-v2/client@1.0.5 › github.com/hashicorp/go-retryablehttp@0.7.4 › github.com/hashicorp/go-cleanhttp@0.5.2

MPL-2.0 license

More about this vulnerability

## MPL-2.0 license

medium severity

- Manifest file: /argo-cd/argoproj/argo-cd/v2 › go.mod
- Package Manager: golang
- Module: github.com/gosimple/slug
- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 and github.com/gosimple/slug@1.13.1

### Detailed paths

- Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › github.com/gosimple/slug@1.13.1

MPL-2.0 license

More about this vulnerability

## Template Injection

medium severity

- Manifest file: /argo-cd › ui/yarn.lock
- Package Manager: npm
- Vulnerable module: dompurify
- Introduced through: argo-cd-ui@1.0.0, redoc@2.0.0-rc.64 and others

### Detailed paths

- Introduced through: argo-cd-ui@1.0.0 › redoc@2.0.0-rc.64 › dompurify@2.3.6

## Overview

dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG.

Affected versions of this package are vulnerable to Template Injection in `purify.js`, due to inconsistencies in the parsing of XML and HTML tags. Executable code can be injected in HTML inside XML `CDATA` blocks.

## PoC

    <![CDATA[ ><img src onerror=alert(1)> ]]>

## Remediation

Upgrade `dompurify` to version 2.4.9, 3.0.11 or higher.

## References

- GitHub Commit
- GitHub Commit
- Vulnerability Report

More about this vulnerability