Conversation
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
![wiz-31e53e2d7d[bot]](https://avatars.githubusercontent.com/u/110367069?s=60&v=4){kind=small}
There was a problem hiding this comment.
The following vulnerability impacts org.springframework.boot:spring-boot-autoconfigure versions <2.6.15: CVE-2023-20883.
It can be remediated by updating to version 2.6.15 or higher.
Dependency Tree
org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
| <version>2.6.15</version> |
There was a problem hiding this comment.
The following vulnerability impacts org.springframework.boot:spring-boot versions <3.3.11: CVE-2025-22235.
It can be remediated by updating to version 3.3.11 or higher.
Dependency Tree
org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
| <version>3.3.11</version> |
There was a problem hiding this comment.
The following vulnerabilities impact com.fasterxml.jackson.core:jackson-databind versions <2.13.4.2: CVE-2020-36518, CVE-2022-42003, CVE-2022-42004.
These can be remediated by updating to version 2.13.4.2 or higher.
Dependency Tree
org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
└── com.fasterxml.jackson.core:[email protected]
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
| <version>2.6.3</version> |
There was a problem hiding this comment.
The following vulnerability impacts ch.qos.logback:logback-classic versions <1.2.13: CVE-2023-6378.
It can be remediated by updating to version 1.2.13 or higher.
Dependency Tree
org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
└── org.springframework.boot:[email protected]
└── ch.qos.logback:[email protected]
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
| <version>2.6.3</version> |
1 participant
No description provided.