Skip to content

Conversation

@wiz-6cbc7756d1
Copy link
Contributor

@wiz-6cbc7756d1 wiz-6cbc7756d1 bot commented Dec 9, 2025

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 6 findings detected in this project

Changes were made to the following file(s):

  • /package.json
  • /packages/core-sdk/package.json
  • /packages/wagmi-generator/package.json

Vulnerabilities:

Component Findings Locations
@metamask/sdk
0.20.3 → 5.0.0
Medium GHSA-qj3p-xc97-xw74 /packages/wagmi-generator/package.json
@metamask/sdk
0.32.0 → 2.17.1
Medium GHSA-qj3p-xc97-xw74 /packages/wagmi-generator/package.json
@metamask/sdk-communication-layer
0.20.2 → 5.0.0
Medium GHSA-qj3p-xc97-xw74 /packages/wagmi-generator/package.json
@metamask/sdk-communication-layer
0.32.0 → 2.17.1
Medium GHSA-qj3p-xc97-xw74 /packages/wagmi-generator/package.json
axios
1.9.0 → 1.12.0
High CVE-2025-58754 /packages/core-sdk/package.json
tmp
0.0.33 → 2.29.6
Medium CVE-2025-54798 /package.json

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-6cbc7756d1
Copy link
Contributor Author

wiz-6cbc7756d1 bot commented Dec 9, 2025

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Total 1 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-6cbc7756d1
Copy link
Contributor Author

wiz-6cbc7756d1 bot commented Dec 9, 2025

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Total 1 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants