x/vulndb: potential Go vuln in github.com/argoproj/argo-cd/util/cache: GHSA-xcqr-9h24-vrgw

[GoVulnBot]

In GitHub Security Advisory GHSA-xcqr-9h24-vrgw, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/argoproj/argo-cd/util/cache	1.5.1	< 1.5.1

Cross references:

• CVE-2020-8827 appears in issue x/vulndb: potential Go vuln in github.com/argoproj/argo-cd/util/cache: GHSA-xcqr-9h24-vrgw #892 NOT_IMPORTABLE
• GHSA-xcqr-9h24-vrgw appears in issue x/vulndb: potential Go vuln in github.com/argoproj/argo-cd/util/cache: GHSA-xcqr-9h24-vrgw #892 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - fixed: 1.5.1
    packages:
      - package: github.com/argoproj/argo-cd/util/cache
description: As of v1.5.0, the Argo API does not implement anti-automation measures
    such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers
    can submit an unlimited number of authentication attempts without consequence.
cves:
  - CVE-2020-8827
ghsas:
  - GHSA-xcqr-9h24-vrgw

[tatianab]

Duplicate of #892