Skip to content

Wiz: Upgrade multiple dependencies (resolves 28 findings) - #28

Open
wiz-betterup[bot] wants to merge 1 commit into
masterfrom
wiz-remediation-2025-12-13-1a782a706d59
Open

Wiz: Upgrade multiple dependencies (resolves 28 findings)#28
wiz-betterup[bot] wants to merge 1 commit into
masterfrom
wiz-remediation-2025-12-13-1a782a706d59

Conversation

@wiz-betterup

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 28 findings detected in this project

Changes were made to the following file(s):

  • /go.mod

Vulnerabilities:

ComponentFindingsLocations
filippo.io/age
1.0.0 → 1.2.1
MediumGHSA-32gq-x56h-299c/go.mod
github.com/golang-jwt/jwt/v4
4.5.0 → 4.5.2
HighCVE-2025-30204
LowCVE-2024-51744
/go.mod
github.com/hashicorp/go-retryablehttp
0.7.0 → 0.7.7
MediumCVE-2024-6104/go.mod
github.com/opencontainers/runc
1.1.0 → 1.2.8
HighCVE-2022-29162
HighCVE-2025-52565
HighCVE-2024-21626
HighCVE-2025-31133
HighCVE-2023-27561
HighCVE-2023-28642
HighCVE-2025-52881
MediumCVE-2023-25809
LowCVE-2024-45310
/go.mod
golang.org/x/crypto
0.0.0-20220411220226-7b82a4e95df4 → 0.45.0
CriticalCVE-2024-45337
HighCVE-2025-22869
MediumCVE-2025-58181
MediumCVE-2023-48795
MediumCVE-2025-47914
/go.mod
golang.org/x/net
0.10.0 → 0.38.0
HighCVE-2023-45288
HighCVE-2023-44487
HighCVE-2023-39325
MediumCVE-2025-22872
MediumCVE-2025-22870
MediumCVE-2023-3978
/go.mod
golang.org/x/oauth2
0.0.0-20220411215720-9780585627b5 → 0.27.0
HighCVE-2025-22868/go.mod
google.golang.org/grpc
1.45.0 → 1.56.3
HighGHSA-m425-mq94-257g/go.mod
google.golang.org/protobuf
1.28.0 → 1.33.0
HighCVE-2024-24786/go.mod
gopkg.in/yaml.v3
3.0.0-20210107192922-496545a6307b → 3.0.0-20220521103104-8f96da9f5d5e
HighCVE-2022-28948/go.mod

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@snyk-io

snyk-ioBot commented Dec 13, 2025

Copy link
Copy Markdown

Snyk checks have failed. 21 issues have been found so far.

StatusScanner Critical High Medium LowTotal (21)
Open Source Security51600 21 issues
Licenses0000 0 issues
Code Security0000 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants