chart

Oct 1, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 15, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 11, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ GetLatestEnvironmentProperties func(appId, environmentId int) (environmentProperties *pipelineBean.EnvironmentProperties, err error)

type ChartServiceImpl

+ func (impl *ChartServiceImpl) GetLatestEnvironmentProperties(appId, environmentId int) (environmentProperties *pipelineBean.EnvironmentProperties, err error)

+ func (impl *ChartServiceImpl) UpdateExistingChartsToLatestFalse(tx *pg.Tx, templateRequest *bean3.TemplateRequest, ...) error

Jun 16, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 19, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 8, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 23, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ ChartRefAutocompleteGlobalData func() (*chartRefBean.ChartRefAutocompleteResponse, error)

+ GetDeploymentTemplateDataByAppIdAndCharRefId func(appId, chartRefId int) (map[string]interface{}, error)

+ type ChartServiceEnt interface

type ChartServiceImpl

+ func (impl *ChartServiceImpl) ChartRefAutocompleteGlobalData() (*chartRefBean.ChartRefAutocompleteResponse, error)

+ func (impl *ChartServiceImpl) GetDeploymentTemplateDataByAppIdAndCharRefId(appId, chartRefId int) (map[string]interface{}, error)

Mar 24, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartServiceImpl

+ func (impl *ChartServiceImpl) UpdateChartLocationForEnvironmentConfigs(appId, chartRefId int, userId int32, version string) error

Feb 25, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 21, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 5, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 4, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 27, 2025 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 20, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 13, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 11, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 6, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 2, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 26, 2024 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ ConfigureGitOpsRepoUrlForApp func(appId int, repoUrl, chartLocation string, isCustomRepo bool, userId int32) (*bean2.DeploymentConfig, error)

+ IsGitOpsRepoConfiguredForDevtronApp func(appId int) (bool, error)

type ChartServiceImpl

+ func (impl *ChartServiceImpl) ConfigureGitOpsRepoUrlForApp(appId int, repoUrl, chartLocation string, isCustomRepo bool, userId int32) (*bean2.DeploymentConfig, error)

+ func (impl *ChartServiceImpl) IsGitOpsRepoConfiguredForDevtronApp(appId int) (bool, error)

Jul 11, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 10, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type TemplateRequest

+ ImageDescriptorTemplate string

Jun 7, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 13, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ CheckIfChartRefUserUploadedByAppId func(id int) (bool, error)

+ ConfigureGitOpsRepoUrl func(appId int, repoUrl, chartLocation string, isCustomRepo bool, userId int32) error

+ IsGitOpsRepoAlreadyRegistered func(gitOpsRepoUrl string) (bool, error)

+ IsGitOpsRepoConfiguredForDevtronApps func(appId int) (bool, error)

+ OverrideGitOpsRepoUrl func(appId int, repoUrl string, userId int32) error

type ChartServiceImpl

+ func (impl *ChartServiceImpl) CheckIfChartRefUserUploadedByAppId(id int) (bool, error)

+ func (impl *ChartServiceImpl) ConfigureGitOpsRepoUrl(appId int, repoUrl, chartLocation string, isCustomRepo bool, userId int32) error

+ func (impl *ChartServiceImpl) IsGitOpsRepoAlreadyRegistered(gitOpsRepoUrl string) (bool, error)

+ func (impl *ChartServiceImpl) IsGitOpsRepoConfiguredForDevtronApps(appId int) (bool, error)

+ func (impl *ChartServiceImpl) OverrideGitOpsRepoUrl(appId int, repoUrl string, userId int32) error

type TemplateRequest

+ GitRepoUrl string

+ IsCustomGitRepository bool

+ LatestChartVersion string

Mar 13, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 30, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 15, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 7, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 30, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 29, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ ExtractVariablesAndResolveTemplate func(scope resourceQualifiers.Scope, template string, ...) (string, error)

+ GetRefChart func(templateRequest TemplateRequest) (string, string, error, string, string)

type ChartServiceImpl

+ func (impl ChartServiceImpl) ExtractVariablesAndResolveTemplate(scope resourceQualifiers.Scope, template string, ...) (string, error)

+ func (impl ChartServiceImpl) GetRefChart(templateRequest TemplateRequest) (string, string, error, string, string)

Oct 20, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const CHART_ALREADY_EXISTS_INTERNAL_ERROR

+ const CHART_NAME_RESERVED_INTERNAL_ERROR

+ const ReferenceChart

+ var ReservedChartRefNamesList *[]ReservedChartList

+ func SetReservedChartList(devtronChartList []*chartRepoRepository.ChartRef)

type ChartDto

+ Id int

+ IsUserUploaded bool

type ChartService

+ FetchCustomChartsInfo func() ([]*ChartDto, error)

+ FormatChartName func(chartName string) string

+ GetCustomChartInBytes func(chatRefId int) ([]byte, error)

type ChartServiceImpl

+ func (impl *ChartServiceImpl) FormatChartName(chartName string) string

+ func (impl ChartServiceImpl) FetchCustomChartsInfo() ([]*ChartDto, error)

+ func (impl ChartServiceImpl) GetCustomChartInBytes(chartRefId int) ([]byte, error)

+ func (impl ChartServiceImpl) ValidateReservedChartName(chartName string) (isReservedChart bool, err error)

+ type ReservedChartList struct

+ LocationPrefix string

+ Name string

Sep 15, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type ChartRef struct

+ Description string

+ Id int

+ IsAppMetricsSupported bool

+ Name string

+ UserUploaded bool

+ Version string

+ type ChartRefResponse struct

+ ChartRefs []ChartRef

+ ChartsMetadata map[string]ChartRefMetaData

+ CompatibleChartTypes []string

+ LatestAppChartRef int

+ LatestChartRef int

+ LatestEnvChartRef int

Aug 23, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const DeploymentChartType

+ const RolloutChartType

+ func CheckCompatibility(oldChartType, newChartType string) bool

+ func CompatibleChartsWith(chartType string) []string

+ func PatchWinterSoldierConfig(override json.RawMessage, newChartType string) (json.RawMessage, error)

+ func PatchWinterSoldierIfExists(newChartType string, jsonMap map[string]json.RawMessage) (map[string]json.RawMessage, error)

+ type ChartRefChangeRequest struct

+ AppId int

+ EnvId int

+ TargetChartRefId int

type ChartService

+ ChartRefIdsCompatible func(oldChartRefId int, newChartRefId int) (bool, string, string)

+ FlaggerCanaryEnabled func(values json.RawMessage) (bool, error)

+ PatchEnvOverrides func(values json.RawMessage, oldChartType string, newChartType string) (json.RawMessage, error)

type ChartServiceImpl

+ func (impl ChartServiceImpl) ChartRefIdsCompatible(oldChartRefId int, newChartRefId int) (bool, string, string)

+ func (impl ChartServiceImpl) FlaggerCanaryEnabled(values json.RawMessage) (bool, error)

+ func (impl ChartServiceImpl) PatchEnvOverrides(values json.RawMessage, oldChartType string, newChartType string) (json.RawMessage, error)

Aug 13, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 17, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 3, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 27, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 9, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type ChartService

+ CheckIsAppMetricsSupported func(chartRefId int) (bool, error)

type ChartServiceImpl

+ func (impl ChartServiceImpl) CheckIsAppMetricsSupported(chartRefId int) (bool, error)

May 25, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 23, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 11, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 27, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 31, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 17, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 9, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 3, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 9, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 23, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 16, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 10, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type ChartRefMetaData struct

+ ChartDescription string

Nov 3, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type TemplateRequest

+ CurrentViewEditor models.ChartsViewEditorType

+ IsBasicViewLocked bool

Oct 18, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 24, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 30, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 22, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 5, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 29, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 27, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 23, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 22, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 17, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 9, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type AppConfigResponse struct

+ LatestAppConfig TemplateRequest

+ PreviousAppConfig TemplateRequest

+ type AppMetricEnableDisableRequest struct

+ AppId int

+ EnvironmentId int

+ IsAppMetricsEnabled bool

+ UserId int32

+ type AppMetricsEnabled struct

+ AppMetrics bool

+ type ChartDataInfo struct

+ ChartLocation string

+ ChartName string

+ ChartVersion string

+ Description string

+ Message string

+ TemporaryFolder string

+ type ChartDto struct

+ ChartDescription string

+ Name string

+ Version string

+ type ChartService interface

+ AppMetricsEnableDisable func(appMetricRequest AppMetricEnableDisableRequest) (*AppMetricEnableDisableRequest, error)

+ ChartRefAutocomplete func() ([]chartRef, error)

+ ChartRefAutocompleteForAppOrEnv func(appId int, envId int) (*chartRefResponse, error)

+ CheckChartExists func(chartRefId int) error

+ CheckCustomChartByAppId func(id int) (bool, error)

+ CheckCustomChartByChartId func(id int) (bool, error)

+ Create func(templateRequest TemplateRequest, ctx context.Context) (chart *TemplateRequest, err error)

+ CreateChartFromEnvOverride func(templateRequest TemplateRequest, ctx context.Context) (chart *TemplateRequest, err error)

+ DeploymentTemplateValidate func(templatejson interface{}, chartRefId int) (bool, error)

+ ExtractChartIfMissing func(chartData []byte, refChartDir string, location string) (*ChartDataInfo, error)

+ FetchChartInfoByFlag func(userUploaded bool) ([]*ChartDto, error)

+ FindLatestChartForAppByAppId func(appId int) (chartTemplate *TemplateRequest, err error)

+ FindPreviousChartByAppId func(appId int) (chartTemplate *TemplateRequest, err error)

+ GetAppOverrideForDefaultTemplate func(chartRefId int) (map[string]interface{}, error)

+ GetByAppIdAndChartRefId func(appId int, chartRefId int) (chartTemplate *TemplateRequest, err error)

+ GetLocationFromChartNameAndVersion func(chartName string, chartVersion string) string

+ GetSchemaAndReadmeForTemplateByChartRefId func(chartRefId int) (schema []byte, readme []byte, err error)

+ IsReadyToTrigger func(appId int, envId int, pipelineId int) (IsReady, error)

+ JsonSchemaExtractFromFile func(chartRefId int) (map[string]interface{}, error)

+ ReadChartMetaDataForLocation func(chartDir string, fileName string) (*ChartYamlStruct, error)

+ RegisterInArgo func(chartGitAttribute *util.ChartGitAttribute, ctx context.Context) error

+ UpdateAppOverride func(templateRequest *TemplateRequest) (*TemplateRequest, error)

+ UpgradeForApp func(appId int, chartRefId int, newAppOverride map[string]interface{}, userId int32, ...) (bool, error)

+ ValidateUploadedFileFormat func(fileName string) error

+ type ChartServiceImpl struct

+ func NewChartServiceImpl(chartRepository chartRepoRepository.ChartRepository, logger *zap.SugaredLogger, ...) *ChartServiceImpl

+ func (impl *ChartServiceImpl) GetLocationFromChartNameAndVersion(chartName string, chartVersion string) string

+ func (impl *ChartServiceImpl) ValidateUploadedFileFormat(fileName string) error

+ func (impl ChartServiceImpl) AppMetricsEnableDisable(appMetricRequest AppMetricEnableDisableRequest) (*AppMetricEnableDisableRequest, error)

+ func (impl ChartServiceImpl) ChartRefAutocomplete() ([]chartRef, error)

+ func (impl ChartServiceImpl) ChartRefAutocompleteForAppOrEnv(appId int, envId int) (*chartRefResponse, error)

+ func (impl ChartServiceImpl) CheckChartExists(chartRefId int) error

+ func (impl ChartServiceImpl) CheckCustomChartByAppId(id int) (bool, error)

+ func (impl ChartServiceImpl) CheckCustomChartByChartId(id int) (bool, error)

+ func (impl ChartServiceImpl) Create(templateRequest TemplateRequest, ctx context.Context) (*TemplateRequest, error)

+ func (impl ChartServiceImpl) CreateChartFromEnvOverride(templateRequest TemplateRequest, ctx context.Context) (*TemplateRequest, error)

+ func (impl ChartServiceImpl) DeploymentTemplateValidate(templatejson interface{}, chartRefId int) (bool, error)

+ func (impl ChartServiceImpl) ExtractChartIfMissing(chartData []byte, refChartDir string, location string) (*ChartDataInfo, error)

+ func (impl ChartServiceImpl) FetchChartInfoByFlag(userUploaded bool) ([]*ChartDto, error)

+ func (impl ChartServiceImpl) FindLatestChartForAppByAppId(appId int) (chartTemplate *TemplateRequest, err error)

+ func (impl ChartServiceImpl) FindPreviousChartByAppId(appId int) (chartTemplate *TemplateRequest, err error)

+ func (impl ChartServiceImpl) GetAppOverrideForDefaultTemplate(chartRefId int) (map[string]interface{}, error)

+ func (impl ChartServiceImpl) GetByAppIdAndChartRefId(appId int, chartRefId int) (chartTemplate *TemplateRequest, err error)

+ func (impl ChartServiceImpl) GetSchemaAndReadmeForTemplateByChartRefId(chartRefId int) ([]byte, []byte, error)

+ func (impl ChartServiceImpl) IsReadyToTrigger(appId int, envId int, pipelineId int) (IsReady, error)

+ func (impl ChartServiceImpl) JsonSchemaExtractFromFile(chartRefId int) (map[string]interface{}, error)

+ func (impl ChartServiceImpl) ReadChartMetaDataForLocation(chartDir string, fileName string) (*ChartYamlStruct, error)

+ func (impl ChartServiceImpl) RegisterInArgo(chartGitAttribute *util.ChartGitAttribute, ctx context.Context) error

+ func (impl ChartServiceImpl) UpdateAppOverride(templateRequest *TemplateRequest) (*TemplateRequest, error)

+ func (impl ChartServiceImpl) UpgradeForApp(appId int, chartRefId int, newAppOverride map[string]interface{}, userId int32, ...) (bool, error)

+ type ChartUpgradeRequest struct

+ All bool

+ AppIds []int

+ ChartRefId int

+ UserId int32

+ type ChartYamlStruct struct

+ Description string

+ Name string

+ Version string

+ type DefaultChart string

+ type IsReady struct

+ Flag bool

+ Message string

+ type PipelineConfigRequest struct

+ AppId int

+ EnvConfigOverrideId int

+ EnvId int

+ Id int

+ Latest bool

+ ManualReviewed bool

+ PipelineConfigValues json.RawMessage

+ PipelineId int

+ Previous bool

+ UserId int32

+ type PipelineConfigRequestResponse struct

+ LatestPipelineConfigRequest PipelineConfigRequest

+ PreviousPipelineConfigRequest PipelineConfigRequest

+ type TemplateRequest struct

+ AppId int

+ ChartRefId int

+ ChartRepositoryId int

+ DefaultAppOverride json.RawMessage

+ Id int

+ IsAppMetricsEnabled bool

+ Latest bool

+ Readme string

+ RefChartTemplate string

+ RefChartTemplateVersion string

+ Schema json.RawMessage

+ UserId int32

+ ValuesOverride json.RawMessage