Skip to content

Wiz: Upgrade multiple dependencies (resolves 47 findings) - #56

Open
wiz-betterup[bot] wants to merge 1 commit into
masterfrom
wiz-auto-remediation-4f24d330a65678ad
Open

Wiz: Upgrade multiple dependencies (resolves 47 findings)#56
wiz-betterup[bot] wants to merge 1 commit into
masterfrom
wiz-auto-remediation-4f24d330a65678ad

Conversation

@wiz-betterup

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 47 findings detected in this project

Changes were made to the following file(s):

  • go.mod
  • go.sum

Vulnerabilities:

ComponentFindingsLocations
filippo.io/age
1.0.0 → 1.2.1
MediumGHSA-32gq-x56h-299c/go.mod
github.com/golang-jwt/jwt/v4
4.5.0 → 4.5.2
HighCVE-2025-30204
LowCVE-2024-51744
/go.mod
github.com/hashicorp/go-retryablehttp
0.7.0 → 0.7.7
MediumCVE-2024-6104/go.mod
github.com/opencontainers/runc
1.1.0 → 1.3.6
HighCVE-2022-29162
HighCVE-2025-52565
HighCVE-2024-21626
HighCVE-2025-31133
HighCVE-2023-27561
HighCVE-2023-28642
HighCVE-2025-52881
MediumCVE-2023-25809
LowCVE-2024-45310
LowCVE-2026-41579
/go.mod
golang.org/x/crypto
0.0.0-20220411220226-7b82a4e95df4 → 0.52.0
CriticalCVE-2026-46595
CriticalCVE-2026-39834
CriticalCVE-2026-42508
CriticalCVE-2026-39833
CriticalCVE-2026-39831
CriticalCVE-2024-45337
CriticalCVE-2026-39830
CriticalCVE-2026-39832
HighCVE-2025-47913
HighCVE-2025-22869
HighCVE-2026-46597
HighCVE-2026-39829
MediumCVE-2026-46598
MediumCVE-2026-39835
MediumCVE-2025-58181
MediumCVE-2023-48795
MediumCVE-2026-39827
MediumCVE-2026-39828
MediumCVE-2025-47914
/go.mod
golang.org/x/net
0.10.0 → 0.55.0
CriticalCVE-2026-39821
HighCVE-2023-45288
HighCVE-2023-44487
HighCVE-2023-39325
MediumCVE-2025-22872
MediumCVE-2025-22870
MediumCVE-2023-3978
MediumCVE-2026-25680
/go.mod
golang.org/x/oauth2
0.0.0-20220411215720-9780585627b5 → 0.27.0
HighCVE-2025-22868/go.mod
google.golang.org/grpc
1.45.0 → 1.82.1
CriticalCVE-2026-33186
HighCVE-2023-44487
HighGHSA-hrxh-6v49-42gf
/go.mod
google.golang.org/protobuf
1.28.0 → 1.33.0
HighCVE-2024-24786/go.mod
gopkg.in/yaml.v3
3.0.0-20210107192922-496545a6307b → 3.0.0-20220521103104-8f96da9f5d5e
HighCVE-2022-28948/go.mod

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants