Skip to content

Wiz: Upgrade multiple dependencies (resolves 18 findings) - #4

Open
wiz-7b07bb9b2a[bot] wants to merge 1 commit into
masterfrom
wiz-remediation-2026-09-12-680aebb76851
Open

wiz-7b07bb9b2a[bot] wants to merge 1 commit into
masterfrom
wiz-remediation-2026-09-12-680aebb76851

Conversation

@wiz-7b07bb9b2a

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 18 findings detected in this project

Changes were made to the following file(s):

  • package.json

Vulnerabilities:

Component Findings Locations
concat-stream
1.5.0 → 2.1.1
Medium GHSA-g74r-ffvr-5q9f
Medium NSWG-ECO-392
/package.json
debug
0.7.4 → 2.1.1
High CVE-2017-20165
Medium CVE-2017-16137
/package.json
extract-zip
1.5.0 → 2.1.1
High CVE-2026-56876
High CVE-2026-19693
/package.json
lodash
3.10.1 → 4.18.0
Critical CVE-2019-10744
High CVE-2020-8203
High CVE-2021-23337
Medium CVE-2018-3721
Medium CVE-2026-2950
Medium CVE-2018-16487
/package.json
minimist
0.0.8 → 2.1.1
Critical CVE-2021-44906
Medium CVE-2020-7598
/package.json
node-uuid
1.3.3 → 2.0.0-alpha
High CVE-2015-8851 /package.json
sockjs
0.3.7 → 2.0.0-alpha
Medium CVE-2020-7693 /package.json
tree-kill
0.0.6 → 1.2.2
Critical CVE-2019-15598
Critical CVE-2019-15599
/package.json

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-7b07bb9b2a

wiz-7b07bb9b2a Bot commented Sep 12, 2026

Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 12 High 17 Medium
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 12 High 17 Medium

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants