—
GO-2022-0490
Uses of deprecated API can be used to cause DoS in user-facing endpoints in github.com/argoproj/argo-events
Quick fix
GO-2022-0490 — github.com/argoproj/argo-events: upgrade to the fixed version with the command below.
go get github.com/argoproj/argo-events@v1.7.1Details
Uses of deprecated API can be used to cause DoS in user-facing endpoints in github.com/argoproj/argo-events
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/argoproj/argo-events
Introduced in:
0Fixed in: 1.7.1Fix
go get github.com/argoproj/argo-events@v1.7.1References
- https://github.com/argoproj/argo-events/security/advisories/GHSA-5q86-62xr-3r57[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-31054[ADVISORY]
- https://github.com/argoproj/argo-events/commit/eaabcb6d65022fc34a0cc9ea7f00681abd326b35[FIX]
- https://github.com/argoproj/argo-events/pull/1966[FIX]
- https://github.com/argoproj/argo-events/issues/1946[REPORT]