Skip to content

Wiz: Upgrade multiple dependencies (resolves 5 findings)#7

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit intomainfrom
wiz-auto-remediation-54f2b0d87ac6df84
Open

Wiz: Upgrade multiple dependencies (resolves 5 findings)#7
wiz-code-21c5ec5a85[bot] wants to merge 1 commit intomainfrom
wiz-auto-remediation-54f2b0d87ac6df84

Conversation

@wiz-code-21c5ec5a85
Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 5 findings detected in this project

Changes were made to the following file(s):

  • app/package-lock.json
  • app/package.json
  • package-lock.json
  • package.json

Vulnerabilities:

Component Findings Locations
elliptic
6.6.1 → 6.0.0-beta.1
Medium CVE-2025-14505 /app/package.json
/package.json
lodash
4.17.21 → 6.7.0
Critical CVE-2026-4800
Medium CVE-2026-2950
Medium CVE-2025-13465
/app/package.json

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

wiz-code-21c5ec5a85 Bot commented May 2, 2026

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 3 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 3 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 3 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 3 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants