Skip to content

Wiz: Upgrade multiple dependencies (resolves 48 findings) - #59

Open
wiz-betterup[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-2408eed6c5277c07
Open

Wiz: Upgrade multiple dependencies (resolves 48 findings)#59
wiz-betterup[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-2408eed6c5277c07

Conversation

@wiz-betterup

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 48 findings detected in this project

Changes were made to the following file(s):

  • go.mod

Vulnerabilities:

ComponentFindingsLocations
github.com/containerd/containerd
1.7.0 → 1.7.33
CriticalCVE-2026-53488
HighCVE-2024-25621
HighCVE-2024-40635
MediumGHSA-7ww5-4wqc-m92c
MediumCVE-2026-47262
MediumCVE-2025-64329
/go.mod
github.com/distribution/distribution/v3
3.0.0-20221208165359-362910506bc2 → 3.1.1
HighCVE-2026-35172
HighCVE-2026-33540
MediumCVE-2026-41888
/go.mod
github.com/docker/cli
20.10.21+incompatible → 29.2.0
HighCVE-2025-15558/go.mod
github.com/docker/docker
20.10.24+incompatible → 29.3.1
HighCVE-2024-24557
HighCVE-2024-29018
HighCVE-2026-34040
MediumCVE-2025-54410
MediumGHSA-jq35-85cj-fj4p
/go.mod
github.com/moby/spdystream
0.2.0 → 0.5.1
HighCVE-2026-35469/go.mod
golang.org/x/crypto
0.5.0 → 0.52.0
CriticalCVE-2024-45337
CriticalCVE-2026-39833
CriticalCVE-2026-46595
CriticalCVE-2026-39832
CriticalCVE-2026-39831
CriticalCVE-2026-39830
CriticalCVE-2026-42508
CriticalCVE-2026-39834
HighCVE-2026-39829
HighCVE-2025-47913
HighCVE-2026-46597
HighCVE-2025-22869
MediumCVE-2026-46598
MediumCVE-2026-39828
MediumCVE-2026-39835
MediumCVE-2026-39827
MediumCVE-2025-58181
MediumCVE-2023-48795
MediumCVE-2025-47914
/go.mod
golang.org/x/net
0.8.0 → 0.55.0
CriticalCVE-2026-39821
HighCVE-2023-44487
HighCVE-2023-45288
HighCVE-2023-39325
MediumCVE-2025-22870
MediumCVE-2026-25680
MediumCVE-2023-3978
MediumCVE-2025-22872
/go.mod
golang.org/x/oauth2
0.4.0 → 0.27.0
HighCVE-2025-22868/go.mod
google.golang.org/grpc
1.53.0 → 1.82.1
CriticalCVE-2026-33186
HighGHSA-hrxh-6v49-42gf
HighCVE-2023-44487
/go.mod
google.golang.org/protobuf
1.28.1 → 1.33.0
HighCVE-2024-24786/go.mod

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-betterup

Copy link
Copy Markdown
Author

⚠️ Lock file update issue

Please update the lock file manually before merging this PR.

go.sum
Internal Error

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants