Skip to content

Wiz: Upgrade multiple dependencies (resolves 12 findings) - #10

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-fb790f7cf35a054b
Open

Wiz: Upgrade multiple dependencies (resolves 12 findings)#10
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-fb790f7cf35a054b

Conversation

@wiz-code-21c5ec5a85

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 12 findings detected in this project

Changes were made to the following file(s):

  • package.json

Vulnerabilities:

Component Findings Locations
axios
1.16.0 → 3.0.0
Medium CVE-2026-67314 /package.json
postcss
8.4.49 → 55.0.25
Critical CVE-2026-45623
Medium CVE-2026-41305
Medium CVE-2026-69153
/package.json
uuid
7.0.3 → 55.0.8-canary-20260424-7bedc9d
High CVE-2026-41907 /package.json
uuid
8.3.2 → 3.0.0
High CVE-2026-41907 /package.json
uuid
9.0.1 → 3.0.0
High CVE-2026-41907 /package.json
ws
8.18.0 → 3.0.0
High CVE-2026-48779
High CVE-2026-45736
/package.json
ws
8.18.1 → 2.54.2
High CVE-2026-45736
High CVE-2026-48779
/package.json

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

⚠️ Lock file update issue

Please update the lock file manually before merging this PR.

package-lock.json
Internal Error

@wiz-code-21c5ec5a85

wiz-code-21c5ec5a85 Bot commented Aug 20, 2026

Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 Medium
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 Medium

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants