Wiz: Upgrade multiple dependencies (resolves 134 findings)#4
Wiz: Upgrade multiple dependencies (resolves 134 findings)#4wiz-eada2dc3a8[bot] wants to merge 1 commit into
Conversation
Wiz Scan Summary
|
| Scanner | Findings |
|---|---|
 |
8    |
 |
- |
 |
- |
 |
- |
 |
- |
 |
- |
| Total | 8 |
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.
Wiz Scan Summary
|
| Scanner | Findings |
|---|---|
|
8 |
|
- |
|
- |
|
- |
|
- |
|
- |
| Total | 8 |
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.
Wiz Scan Summary
|
| Scanner | Findings |
|---|---|
|
8 |
|
- |
|
- |
|
- |
|
- |
|
- |
| Total | 8 |
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.
Wiz Scan Summary
|
| Scanner | Findings |
|---|---|
|
8 |
|
- |
|
- |
|
- |
|
- |
|
- |
| Total | 8 |
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.
![wiz-eada2dc3a8[bot]](https://avatars.githubusercontent.com/u/67065230?s=60&v=4){kind=small}
| <groupId>com.alibaba</groupId> | ||
| <artifactId>fastjson</artifactId> | ||
| <version>1.2.24</version> | ||
| <version>1.2.48</version> |
There was a problem hiding this comment.
The following vulnerability impacts com.alibaba:fastjson versions <1.2.83: CVE-2022-25845.
It can be remediated by updating to version 1.2.83 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>1.2.48</version> | |
| <version>1.2.83</version> |
| <groupId>com.fasterxml.jackson.core</groupId> | ||
| <artifactId>jackson-databind</artifactId> | ||
| <version>2.9.8</version> | ||
| <version>2.9.10</version> |
There was a problem hiding this comment.
The following vulnerabilities impact com.fasterxml.jackson.core:jackson-databind versions <2.12.7.1: CVE-2019-16942, CVE-2019-16943, CVE-2019-17531, CVE-2019-20330, CVE-2020-10650, CVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969, CVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619, CVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062, CVE-2020-14195, CVE-2020-24616, CVE-2020-24750, CVE-2020-25649, CVE-2020-35490, CVE-2020-35491, CVE-2020-35728, CVE-2020-36179, CVE-2020-36180, CVE-2020-36181, CVE-2020-36182, CVE-2020-36183, CVE-2020-36184, CVE-2020-36185, CVE-2020-36186, CVE-2020-36187, CVE-2020-36188, CVE-2020-36189, CVE-2020-36518, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2021-20190, CVE-2022-42003, CVE-2022-42004.
These can be remediated by updating to version 2.12.7.1 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>2.9.10</version> | |
| <version>2.12.7.1</version> |
| <groupId>com.fasterxml.jackson.core</groupId> | ||
| <artifactId>jackson-databind</artifactId> | ||
| <version>2.9.8</version> | ||
| <version>2.9.10</version> |
There was a problem hiding this comment.
The following vulnerabilities impact com.fasterxml.jackson.core:jackson-databind versions <2.12.7.1: CVE-2019-16942, CVE-2019-16943, CVE-2019-17531, CVE-2019-20330, CVE-2020-10650, CVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969, CVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619, CVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062, CVE-2020-14195, CVE-2020-24616, CVE-2020-24750, CVE-2020-25649, CVE-2020-35490, CVE-2020-35491, CVE-2020-35728, CVE-2020-36179, CVE-2020-36180, CVE-2020-36181, CVE-2020-36182, CVE-2020-36183, CVE-2020-36184, CVE-2020-36185, CVE-2020-36186, CVE-2020-36187, CVE-2020-36188, CVE-2020-36189, CVE-2020-36518, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2021-20190, CVE-2022-42003, CVE-2022-42004.
These can be remediated by updating to version 2.12.7.1 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>2.9.10</version> | |
| <version>2.12.7.1</version> |
| <groupId>com.alibaba</groupId> | ||
| <artifactId>fastjson</artifactId> | ||
| <version>1.2.24</version> | ||
| <version>1.2.48</version> |
There was a problem hiding this comment.
The following vulnerability impacts com.alibaba:fastjson versions <1.2.83: CVE-2022-25845.
It can be remediated by updating to version 1.2.83 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>1.2.48</version> | |
| <version>1.2.83</version> |
| <groupId>com.alibaba</groupId> | ||
| <artifactId>fastjson</artifactId> | ||
| <version>1.2.24</version> | ||
| <version>1.2.48</version> |
There was a problem hiding this comment.
The following vulnerability impacts com.alibaba:fastjson versions <1.2.83: CVE-2022-25845.
It can be remediated by updating to version 1.2.83 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>1.2.48</version> | |
| <version>1.2.83</version> |
| <groupId>com.fasterxml.jackson.core</groupId> | ||
| <artifactId>jackson-databind</artifactId> | ||
| <version>2.9.8</version> | ||
| <version>2.9.10</version> |
There was a problem hiding this comment.
The following vulnerabilities impact com.fasterxml.jackson.core:jackson-databind versions <2.12.7.1: CVE-2019-16942, CVE-2019-16943, CVE-2019-17531, CVE-2019-20330, CVE-2020-10650, CVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969, CVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619, CVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062, CVE-2020-14195, CVE-2020-24616, CVE-2020-24750, CVE-2020-25649, CVE-2020-35490, CVE-2020-35491, CVE-2020-35728, CVE-2020-36179, CVE-2020-36180, CVE-2020-36181, CVE-2020-36182, CVE-2020-36183, CVE-2020-36184, CVE-2020-36185, CVE-2020-36186, CVE-2020-36187, CVE-2020-36188, CVE-2020-36189, CVE-2020-36518, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2021-20190, CVE-2022-42003, CVE-2022-42004.
These can be remediated by updating to version 2.12.7.1 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>2.9.10</version> | |
| <version>2.12.7.1</version> |
| <groupId>com.alibaba</groupId> | ||
| <artifactId>fastjson</artifactId> | ||
| <version>1.2.24</version> | ||
| <version>1.2.48</version> |
There was a problem hiding this comment.
The following vulnerability impacts com.alibaba:fastjson versions <1.2.83: CVE-2022-25845.
It can be remediated by updating to version 1.2.83 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>1.2.48</version> | |
| <version>1.2.83</version> |
| <groupId>com.fasterxml.jackson.core</groupId> | ||
| <artifactId>jackson-databind</artifactId> | ||
| <version>2.9.8</version> | ||
| <version>2.9.10</version> |
There was a problem hiding this comment.
The following vulnerabilities impact com.fasterxml.jackson.core:jackson-databind versions <2.12.7.1: CVE-2019-16942, CVE-2019-16943, CVE-2019-17531, CVE-2019-20330, CVE-2020-10650, CVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969, CVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619, CVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062, CVE-2020-14195, CVE-2020-24616, CVE-2020-24750, CVE-2020-25649, CVE-2020-35490, CVE-2020-35491, CVE-2020-35728, CVE-2020-36179, CVE-2020-36180, CVE-2020-36181, CVE-2020-36182, CVE-2020-36183, CVE-2020-36184, CVE-2020-36185, CVE-2020-36186, CVE-2020-36187, CVE-2020-36188, CVE-2020-36189, CVE-2020-36518, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548, CVE-2021-20190, CVE-2022-42003, CVE-2022-42004.
These can be remediated by updating to version 2.12.7.1 or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>2.9.10</version> | |
| <version>2.12.7.1</version> |
Wiz has created this PR to fix 134 findings detected in this project
Changes were made to the following file(s):
pom.xmlVulnerabilities:
5.8.10 → 5.8.21
/pom.xml1.2.24 → 1.2.48
/pom.xml2.9.8 → 2.18.6
/pom.xmlind
2.9.8 → 2.9.10
/pom.xml23.0 → 32.0.0-android
/pom.xml1.4.199 → 2.2.220
/pom.xml2.0.0 → 2.1.0
/pom.xml1.4.20 → 1.4.21
/pom.xml1.9.4 → 1.11.0
/pom.xml3.1 → 3.2.2
/pom.xml2.5 → 2.14.0
/pom.xml3.6 → 3.9.0
/pom.xml2.9.2 → 2.10.0
/pom.xml8.0.12 → 8.0.28
/pom.xml4.5.12 → 4.5.13
/pom.xml2.9.1 → 2.25.4
/pom.xml3.10-FINAL → 4.1.1
/pom.xml3.9 → 5.4.0
/pom.xmlTo detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.