Skip to content

Wiz: Upgrade multiple dependencies (resolves 5 findings) - #5

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
devfrom
wiz-auto-remediation-079c142612ee4d2c
Open

wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
devfrom
wiz-auto-remediation-079c142612ee4d2c

Conversation

@wiz-code-21c5ec5a85

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 5 findings detected in this project

Changes were made to the following file(s):

  • package.json

Vulnerabilities:

Component Findings Locations
gatsby
4.21.1 → 4.25.7
Medium CVE-2023-34238 /package.json
gatsby-plugin-sharp
4.21.0 → 4.25.1
Medium CVE-2023-30548 /package.json
gatsby-transformer-remark
3.2.0 → 5.25.1
Medium CVE-2023-22491 /package.json
luxon
1.28.0 → 1.28.1
High CVE-2023-22467 /package.json
prismjs
1.27.0 → 1.30.0
Medium CVE-2024-53382 /package.json

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

⚠️ Lock file update issue

Please update the lock file manually before merging this PR.

yarn.lock
Unsupported package manager version

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

Wiz Scan Summary

⚠️ Many findings detected
Many findings were detected, but only a subset of the findings are displayed inline due to API constraints. To view all findings inline, please click here.
Scanner Findings
Vulnerability Finding Vulnerabilities 36 High 29 Medium 3 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 36 High 29 Medium 3 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

Wiz Scan Summary

⚠️ Many findings detected
Many findings were detected, but only a subset of the findings are displayed inline due to API constraints. To view all findings inline, please click here.
Scanner Findings
Vulnerability Finding Vulnerabilities 36 High 29 Medium 3 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 36 High 29 Medium 3 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

Wiz Scan Summary

⚠️ Many findings detected
Many findings were detected, but only a subset of the findings are displayed inline due to API constraints. To view all findings inline, please click here.
Scanner Findings
Vulnerability Finding Vulnerabilities 36 High 29 Medium 3 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 36 High 29 Medium 3 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

Wiz Scan Summary

⚠️ Many findings detected
Many findings were detected, but only a subset of the findings are displayed inline due to API constraints. To view all findings inline, please click here.
Scanner Findings
Vulnerability Finding Vulnerabilities 36 High 29 Medium 3 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 36 High 29 Medium 3 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants