Skip to content

Wiz: Upgrade multiple dependencies (resolves 9 findings) - #39

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-829bf7aa0005ea69
Open

Wiz: Upgrade multiple dependencies (resolves 9 findings)#39
wiz-code-21c5ec5a85[bot] wants to merge 1 commit into
mainfrom
wiz-auto-remediation-829bf7aa0005ea69

Conversation

@wiz-code-21c5ec5a85

Copy link
Copy Markdown

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 9 findings detected in this project

Changes were made to the following file(s):

  • typescript/examples/event_processor/package.json
  • typescript/sdk/package.json

Vulnerabilities:

Component Findings Locations
@grpc/grpc-js
1.9.2 → 1.9.16
High CVE-2026-48068
High CVE-2026-48069
Medium CVE-2024-37168
/typescript/sdk/package.json
typeorm
0.3.17 → 0.3.31
Medium CVE-2025-60542
Medium GHSA-9ggv-8w38-r7pm
Medium GHSA-2rp8-mm9q-fp49
/typescript/examples/event_processor/package.json
/typescript/sdk/package.json

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@wiz-code-21c5ec5a85

Copy link
Copy Markdown
Author

⚠️ Lock file update issue

Please update the lock file manually before merging this PR.

typescript/sdk/pnpm-lock.yaml
Internal Error

typescript/examples/event_processor/pnpm-lock.yaml
Internal Error

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants