fix(deps): upgrade http2 to v0.24. Fixes CVE-2023-45288 (#12901)

Signed-off-by: Yuan Tang <terrytangyuan@gmail.com>
argoproj · Apr 9, 2024 · fc30b5a · fc30b5a
1 parent 6c2211e
commit fc30b5a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/go.mod b/go.mod
@@ -293,3 +293,6 @@ require (
 	sigs.k8s.io/kustomize/kyaml v0.13.9 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
 )
+
+// Avoid CVE-2023-45288
+replace golang.org/x/net/http2 => golang.org/x/net/http2 v0.24.0