Skip to content

Wiz: Upgrade multiple dependencies (resolves 13 findings)#15

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
masterfrom
wiz-auto-remediation-8721bee675113ce1
Open

Wiz: Upgrade multiple dependencies (resolves 13 findings)#15
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
masterfrom
wiz-auto-remediation-8721bee675113ce1

Conversation

@wiz-code-21c5ec5a85
Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 13 findings detected in this project

Changes were made to the following file(s):

  • package-lock.json
  • package.json

Vulnerabilities:

Component Findings Locations
elliptic
6.5.4 → 1.0.0
Critical GHSA-vjh7-7g9h-fjfh
Critical CVE-2024-48949
Critical CVE-2024-42461
Medium CVE-2024-48948
Medium CVE-2024-42460
Medium CVE-2024-42459
/package.json
url-parse
1.4.4 → 1.0.0
Critical CVE-2022-0691
Medium CVE-2021-27515
Medium CVE-2021-3664
Medium CVE-2022-0639
Medium CVE-2022-0686
Medium CVE-2022-0512
Medium CVE-2020-8124
/package.json

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

wiz-code-21c5ec5a85 Bot commented May 15, 2026

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 8 High 6 Medium 4 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 8 High 6 Medium 4 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants