a099eb306a
```text
{
"VulnerabilityID": "CVE-2022-41717",
"PkgName": "golang.org/x/net",
"InstalledVersion": "v0.0.0-20220921155015-db77216a4ee9",
"FixedVersion": "0.4.0",
"Layer": {
"DiffID": "sha256:629212d4fb1b47585329d1c630cb91f919ddcd6168031a07121953d6c6dbd438"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-41717",
"DataSource": {
"ID": "go-vulndb",
"Name": "The Go Vulnerability Database",
"URL": "https://github.com/golang/vulndb"
},
"Title": "An attacker can cause excessive memory growth in a Go server accepting ...",
"Description": "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.",
"Severity": "UNKNOWN",
"References": [
"https://go.dev/cl/455635",
"https://go.dev/cl/455717",
"https://go.dev/issue/56350",
"https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ",
"https://pkg.go.dev/vuln/GO-2022-1144"
],
"PublishedDate": "2022-12-08T20:15:00Z",
"LastModifiedDate": "2022-12-08T22:30:00Z"
}
```
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
271 lines
13 KiB
Modula-2
271 lines
13 KiB
Modula-2
module github.com/cert-manager/cert-manager
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
github.com/Azure/azure-sdk-for-go v66.0.0+incompatible
|
|
github.com/Azure/go-autorest/autorest v0.11.28
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.21
|
|
github.com/Azure/go-autorest/autorest/to v0.4.0
|
|
github.com/Venafi/vcert/v4 v4.22.1
|
|
github.com/akamai/AkamaiOPEN-edgegrid-golang v1.2.1
|
|
github.com/aws/aws-sdk-go v1.44.105
|
|
github.com/cloudflare/cloudflare-go v0.50.0
|
|
github.com/cpu/goacmedns v0.1.1
|
|
github.com/digitalocean/godo v1.86.0
|
|
github.com/go-ldap/ldap/v3 v3.4.4
|
|
github.com/go-logr/logr v1.2.3
|
|
github.com/google/gnostic v0.6.9
|
|
github.com/google/gofuzz v1.2.0
|
|
github.com/hashicorp/vault/api v1.8.0
|
|
github.com/hashicorp/vault/sdk v0.6.0
|
|
github.com/kr/pretty v0.3.0
|
|
github.com/miekg/dns v1.1.50
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/munnerz/crd-schema-fuzz v1.0.0
|
|
github.com/onsi/ginkgo/v2 v2.2.0
|
|
github.com/onsi/gomega v1.20.2
|
|
github.com/pavlo-v-chernykh/keystore-go/v4 v4.4.0
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/prometheus/client_golang v1.13.0
|
|
github.com/segmentio/encoding v0.3.5
|
|
github.com/sergi/go-diff v1.2.0
|
|
github.com/spf13/cobra v1.5.0
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/stretchr/testify v1.8.0
|
|
golang.org/x/crypto v0.0.0-20220924013350-4ba4fb4dd9e7
|
|
golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1
|
|
golang.org/x/sync v0.0.0-20220923202941-7f9b1623fab7
|
|
gomodules.xyz/jsonpatch/v2 v2.2.0
|
|
google.golang.org/api v0.97.0
|
|
helm.sh/helm/v3 v3.10.0
|
|
k8s.io/api v0.25.2
|
|
k8s.io/apiextensions-apiserver v0.25.2
|
|
k8s.io/apimachinery v0.25.2
|
|
k8s.io/apiserver v0.25.2
|
|
k8s.io/cli-runtime v0.25.2
|
|
k8s.io/client-go v0.25.2
|
|
k8s.io/code-generator v0.25.2
|
|
k8s.io/component-base v0.25.2
|
|
k8s.io/klog/v2 v2.80.1
|
|
k8s.io/kube-aggregator v0.25.2
|
|
k8s.io/kube-openapi v0.0.0-20220803164354-a70c9af30aea
|
|
k8s.io/kubectl v0.25.2
|
|
k8s.io/utils v0.0.0-20220922133306-665eaaec4324
|
|
sigs.k8s.io/controller-runtime v0.13.0
|
|
sigs.k8s.io/controller-tools v0.10.0
|
|
sigs.k8s.io/gateway-api v0.5.0
|
|
sigs.k8s.io/structured-merge-diff/v4 v4.2.3
|
|
sigs.k8s.io/yaml v1.3.0
|
|
software.sslmate.com/src/go-pkcs12 v0.2.0
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go/compute v1.7.0 // indirect
|
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
|
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
|
|
github.com/Azure/go-autorest/autorest/validation v0.3.1 // indirect
|
|
github.com/Azure/go-autorest/logger v0.2.1 // indirect
|
|
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
|
|
github.com/Azure/go-ntlmssp v0.0.0-20220621081337-cb9428e4ac1e // indirect
|
|
github.com/BurntSushi/toml v1.1.0 // indirect
|
|
github.com/MakeNowJust/heredoc v1.0.0 // indirect
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
|
github.com/Masterminds/semver/v3 v3.1.1 // indirect
|
|
github.com/Masterminds/sprig/v3 v3.2.2 // indirect
|
|
github.com/Masterminds/squirrel v1.5.3 // indirect
|
|
github.com/NYTimes/gziphandler v1.1.1 // indirect
|
|
github.com/PuerkitoBio/purell v1.1.1 // indirect
|
|
github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578 // indirect
|
|
github.com/armon/go-metrics v0.3.9 // indirect
|
|
github.com/armon/go-radix v1.0.0 // indirect
|
|
github.com/asaskevich/govalidator v0.0.0-20200428143746-21a406dcc535 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/blang/semver/v4 v4.0.0 // indirect
|
|
github.com/cenkalti/backoff/v3 v3.0.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.1.2 // indirect
|
|
github.com/chai2010/gettext-go v1.0.2 // indirect
|
|
github.com/containerd/containerd v1.6.6 // indirect
|
|
github.com/coreos/go-semver v0.3.0 // indirect
|
|
github.com/coreos/go-systemd/v22 v22.3.2 // indirect
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
|
github.com/cyphar/filepath-securejoin v0.2.3 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/docker/cli v20.10.17+incompatible // indirect
|
|
github.com/docker/distribution v2.8.1+incompatible // indirect
|
|
github.com/docker/docker v20.10.17+incompatible // indirect
|
|
github.com/docker/docker-credential-helpers v0.6.4 // indirect
|
|
github.com/docker/go-connections v0.4.0 // indirect
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
|
github.com/docker/go-units v0.4.0 // indirect
|
|
github.com/emicklei/go-restful/v3 v3.8.0 // indirect
|
|
github.com/evanphx/json-patch v5.6.0+incompatible // indirect
|
|
github.com/evanphx/json-patch/v5 v5.6.0 // indirect
|
|
github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
|
|
github.com/fatih/camelcase v1.0.0 // indirect
|
|
github.com/fatih/color v1.13.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.1 // indirect
|
|
github.com/fsnotify/fsnotify v1.5.4 // indirect
|
|
github.com/go-asn1-ber/asn1-ber v1.5.4 // indirect
|
|
github.com/go-errors/errors v1.0.1 // indirect
|
|
github.com/go-gorp/gorp/v3 v3.0.2 // indirect
|
|
github.com/go-openapi/jsonpointer v0.19.5 // indirect
|
|
github.com/go-openapi/jsonreference v0.19.5 // indirect
|
|
github.com/go-openapi/swag v0.19.14 // indirect
|
|
github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 // indirect
|
|
github.com/gobuffalo/flect v0.2.5 // indirect
|
|
github.com/gobwas/glob v0.2.3 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang-jwt/jwt/v4 v4.2.0 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/golang/protobuf v1.5.2 // indirect
|
|
github.com/golang/snappy v0.0.4 // indirect
|
|
github.com/google/btree v1.0.1 // indirect
|
|
github.com/google/go-cmp v0.5.8 // indirect
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
|
github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 // indirect
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
|
github.com/google/uuid v1.3.0 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.1.0 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.4.0 // indirect
|
|
github.com/gorilla/mux v1.8.0 // indirect
|
|
github.com/gosuri/uitable v0.0.4 // indirect
|
|
github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
|
github.com/hashicorp/go-hclog v1.2.0 // indirect
|
|
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/go-plugin v1.4.3 // indirect
|
|
github.com/hashicorp/go-retryablehttp v0.7.1 // indirect
|
|
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
|
|
github.com/hashicorp/go-secure-stdlib/mlock v0.1.1 // indirect
|
|
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.6 // indirect
|
|
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2 // indirect
|
|
github.com/hashicorp/go-sockaddr v1.0.2 // indirect
|
|
github.com/hashicorp/go-uuid v1.0.2 // indirect
|
|
github.com/hashicorp/go-version v1.2.0 // indirect
|
|
github.com/hashicorp/golang-lru v0.5.4 // indirect
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
|
github.com/hashicorp/yamux v0.0.0-20180604194846-3520598351bb // indirect
|
|
github.com/huandu/xstrings v1.3.2 // indirect
|
|
github.com/imdario/mergo v0.3.12 // indirect
|
|
github.com/inconshreveable/mousetrap v1.0.0 // indirect
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
|
github.com/jmoiron/sqlx v1.3.5 // indirect
|
|
github.com/josharian/intern v1.0.0 // indirect
|
|
github.com/json-iterator/go v1.1.12 // indirect
|
|
github.com/klauspost/compress v1.13.6 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
|
|
github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
|
|
github.com/lib/pq v1.10.6 // indirect
|
|
github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
|
|
github.com/mailru/easyjson v0.7.6 // indirect
|
|
github.com/mattn/go-colorable v0.1.12 // indirect
|
|
github.com/mattn/go-isatty v0.0.14 // indirect
|
|
github.com/mattn/go-runewidth v0.0.13 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
|
github.com/mitchellh/go-testing-interface v1.0.0 // indirect
|
|
github.com/mitchellh/go-wordwrap v1.0.0 // indirect
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/moby/locker v1.0.1 // indirect
|
|
github.com/moby/spdystream v0.2.0 // indirect
|
|
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
|
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
|
|
github.com/morikuni/aec v1.0.0 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/oklog/run v1.0.0 // indirect
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
|
github.com/opencontainers/image-spec v1.0.3-0.20211202183452-c5a74bcca799 // indirect
|
|
github.com/patrickmn/go-cache v2.1.0+incompatible // indirect
|
|
github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
|
|
github.com/pierrec/lz4 v2.5.2+incompatible // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/prometheus/client_model v0.2.0 // indirect
|
|
github.com/prometheus/common v0.37.0 // indirect
|
|
github.com/prometheus/procfs v0.8.0 // indirect
|
|
github.com/rivo/uniseg v0.2.0 // indirect
|
|
github.com/rogpeppe/go-internal v1.8.1 // indirect
|
|
github.com/rubenv/sql-migrate v1.1.2 // indirect
|
|
github.com/russross/blackfriday v1.5.2 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
github.com/ryanuber/go-glob v1.0.0 // indirect
|
|
github.com/segmentio/asm v1.1.3 // indirect
|
|
github.com/shopspring/decimal v1.2.0 // indirect
|
|
github.com/sirupsen/logrus v1.8.1 // indirect
|
|
github.com/spf13/cast v1.4.1 // indirect
|
|
github.com/stretchr/objx v0.4.0 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
|
|
github.com/xlab/treeprint v1.1.0 // indirect
|
|
github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a // indirect
|
|
go.etcd.io/etcd/api/v3 v3.5.4 // indirect
|
|
go.etcd.io/etcd/client/pkg/v3 v3.5.4 // indirect
|
|
go.etcd.io/etcd/client/v3 v3.5.4 // indirect
|
|
go.opencensus.io v0.23.0 // indirect
|
|
go.opentelemetry.io/contrib v0.20.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.28.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.20.0 // indirect
|
|
go.opentelemetry.io/otel v1.3.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp v0.20.0 // indirect
|
|
go.opentelemetry.io/otel/metric v0.20.0 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.3.0 // indirect
|
|
go.opentelemetry.io/otel/sdk/export/metric v0.20.0 // indirect
|
|
go.opentelemetry.io/otel/sdk/metric v0.20.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.3.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v0.11.0 // indirect
|
|
go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 // indirect
|
|
go.uber.org/atomic v1.9.0 // indirect
|
|
go.uber.org/multierr v1.6.0 // indirect
|
|
go.uber.org/zap v1.21.0 // indirect
|
|
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
|
|
golang.org/x/net v0.4.0 // indirect
|
|
golang.org/x/sys v0.3.0 // indirect
|
|
golang.org/x/term v0.3.0 // indirect
|
|
golang.org/x/text v0.5.0 // indirect
|
|
golang.org/x/time v0.0.0-20220609170525-579cf78fd858 // indirect
|
|
golang.org/x/tools v0.1.12 // indirect
|
|
google.golang.org/appengine v1.6.7 // indirect
|
|
google.golang.org/genproto v0.0.0-20220624142145-8cd45d7dbd1f // indirect
|
|
google.golang.org/grpc v1.47.0 // indirect
|
|
google.golang.org/protobuf v1.28.1 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
gopkg.in/ini.v1 v1.62.0 // indirect
|
|
gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
|
|
gopkg.in/square/go-jose.v2 v2.5.1 // indirect
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/gengo v0.0.0-20211129171323-c02415ce4185 // indirect
|
|
oras.land/oras-go v1.2.0 // indirect
|
|
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.32 // indirect
|
|
sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
|
|
sigs.k8s.io/kustomize/api v0.12.1 // indirect
|
|
sigs.k8s.io/kustomize/kyaml v0.13.9 // indirect
|
|
)
|
|
|
|
replace (
|
|
github.com/miekg/dns v1.1.41 => github.com/miekg/dns v1.1.34
|
|
|
|
go.opentelemetry.io/contrib => go.opentelemetry.io/contrib v0.20.0
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc => go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.20.0
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp => go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.20.0
|
|
go.opentelemetry.io/otel => go.opentelemetry.io/otel v0.20.0
|
|
go.opentelemetry.io/otel/exporters/otlp => go.opentelemetry.io/otel/exporters/otlp v0.20.0
|
|
go.opentelemetry.io/otel/metric => go.opentelemetry.io/otel/metric v0.20.0
|
|
go.opentelemetry.io/otel/oteltest => go.opentelemetry.io/otel/oteltest v0.20.0
|
|
go.opentelemetry.io/otel/sdk => go.opentelemetry.io/otel/sdk v0.20.0
|
|
go.opentelemetry.io/otel/sdk/export/metric => go.opentelemetry.io/otel/sdk/export/metric v0.20.0
|
|
go.opentelemetry.io/otel/sdk/metric => go.opentelemetry.io/otel/sdk/metric v0.20.0
|
|
go.opentelemetry.io/otel/trace => go.opentelemetry.io/otel/trace v0.20.0
|
|
go.opentelemetry.io/proto/otlp => go.opentelemetry.io/proto/otlp v0.7.0
|
|
)
|