Skip to content

Wiz: Upgrade multiple dependencies (resolves 22 findings)#2477

Open
wiz-code-21c5ec5a85[bot] wants to merge 1 commit intomainfrom
wiz-auto-remediation-8402c4987dbb9bee
Open

Wiz: Upgrade multiple dependencies (resolves 22 findings)#2477
wiz-code-21c5ec5a85[bot] wants to merge 1 commit intomainfrom
wiz-auto-remediation-8402c4987dbb9bee

Conversation

@wiz-code-21c5ec5a85
Copy link
Copy Markdown

@wiz-code-21c5ec5a85 wiz-code-21c5ec5a85 Bot commented Apr 29, 2026

Wiz Remediation Pull Request Banner

Wiz has created this PR to fix 22 findings detected in this project

Changes were made to the following file(s):

  • aa-sdk/ethers/package.json
  • account-kit/logging/package.json
  • account-kit/plugingen/package.json
  • account-kit/react/package.json
  • account-kit/rn-signer/example/package.json
  • account-kit/rn-signer/package.json
  • examples/react-native-bare-example/package.json
  • examples/react-native-expo-example/package.json
  • examples/ui-demo/package.json

Vulnerabilities:

Component Findings Locations
@tanstack/form-core
0.33.0 → 0.42.1
High CVE-2024-57068 /account-kit/react/package.json
@xmldom/xmldom
0.7.13 → 53.0.0-canary-20250306-d9d3e02
High CVE-2026-34601 /examples/react-native-expo-example/package.json
elliptic
6.6.1 → 6.0.0-beta.1
Medium CVE-2025-14505 /aa-sdk/ethers/package.json
/examples/react-native-expo-example/package.json
esbuild
0.20.2 → 0.25.0
Medium GHSA-67mh-4wv8-2f99 /account-kit/plugingen/package.json
nanoid
3.3.7 → 7.0.14
Medium CVE-2024-55565 /account-kit/rn-signer/example/package.json
/examples/react-native-bare-example/package.json
prismjs
1.27.0 → 16.0.0
Medium CVE-2024-53382 /examples/ui-demo/package.json
tar
6.2.1 → 53.0.0-canary-20250306-d9d3e02
High CVE-2026-24842
High CVE-2026-26960
High CVE-2026-31802
High CVE-2026-23745
High CVE-2026-29786
Medium CVE-2026-23950
/examples/react-native-expo-example/package.json
uuid
11.1.0 → 14.0.0
High CVE-2026-41907 /account-kit/logging/package.json
/account-kit/rn-signer/package.json

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.


PR-Codex overview

This PR focuses on updating various dependencies across multiple package.json files, ensuring compatibility and incorporating newer versions of libraries.

Detailed summary

  • Updated uuid from ^11.0.2 to 14.0.0 in account-kit/logging and account-kit/rn-signer.
  • Updated esbuild from ^0.20.1 to 0.25.0 in account-kit/plugingen.
  • Updated react-syntax-highlighter from ^15.5.0 to 16.0.0 in examples/ui-demo.
  • Updated @react-navigation/native from 7.0.3 to 7.0.14 in account-kit/rn-signer/example and examples/react-native-bare-example.
  • Updated @tanstack/react-form and @tanstack/zod-form-adapter from ^0.33.0 to 0.42.1 in account-kit/react.
  • Updated @account-kit/signer from 4.17.0 to 4.62.0 in examples/react-native-expo-example.
  • Updated expo from ~52.0.47 to 53.0.0-canary-20250306-d9d3e02 in examples/react-native-expo-example.
  • Updated @ethersproject/abi and @ethersproject/hash from ^5.7.0 to 6.0.0-beta.1 in aa-sdk/ethers.
  • Updated @ethersproject/providers and @ethersproject/wallet from ^5.7.0 to 6.0.0-beta.1 in aa-sdk/ethers.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 2 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 2 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@wiz-code-21c5ec5a85
Copy link
Copy Markdown
Author

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 High
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 2 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants