[Snyk] Fix for 7 vulnerabilities #10
Open
Wiz Inc. (98909e62bd) / Wiz Vulnerability Scanner
completed
Jun 5, 2024 in 4s
Wiz Vulnerability Scanner
Alakazam, Supreme Sorcerer of Software! 🧙
The arcane currents guided Wiz's gaze, uncovering hidden wonders within this code. 🔮🔍
Exposing Vulnerabilities with Wiz 🪄
🔮 Vulnerabilities Detected: 7
― Note from Wiz: "Like a coding magician, you make errors vanish - keep up the magic act! 🎩🔮"
Annotations
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
pyyaml:4.2b1
Detected Vulnerabilities:
CVE-2020-14343, Severity: Critical, Source: https://github.com/advisories/GHSA-8q59-q68h-6hv4
CVSS score: 9.8, CVSS exploitability score: 3.9
🩹 Fixed version: 5.4.0
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2020-1747, Severity: Critical, Source: https://github.com/advisories/GHSA-6757-jp84-gxfx
CVSS score: 9.8, CVSS exploitability score: 3.9
🩹 Fixed version: 5.3.1
💥 Has public exploit
🧨 Has CISA KEV exploit
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
urllib3:1.25.9
Detected Vulnerabilities:
CVE-2021-33503, Severity: High, Source: https://github.com/advisories/GHSA-q2q7-5pp4-w6pg
CVSS score: 7.5, CVSS exploitability score: 3.9
🩹 Fixed version: 1.26.5
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2023-45803, Severity: Medium, Source: https://github.com/advisories/GHSA-g4mx-q9vg-27p4
CVSS score: 4.2, CVSS exploitability score: 0.5
🩹 Fixed version: 1.26.18
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2023-43804, Severity: Medium, Source: https://github.com/advisories/GHSA-v845-jxx5-vc9f
CVSS score: 8.1, CVSS exploitability score: 2.8
🩹 Fixed version: 1.26.17
💥 Has public exploit
🧨 Has CISA KEV exploit
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
requests:2.20
Detected Vulnerabilities:
CVE-2024-35195, Severity: Medium, Source: https://github.com/advisories/GHSA-9wx4-h78v-vm56
🩹 Fixed version: 2.32.0
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2023-32681, Severity: Medium, Source: https://github.com/advisories/GHSA-j8r2-6x86-q33q
CVSS score: 6.1, CVSS exploitability score: 1.6
🩹 Fixed version: 2.31.0
💥 Has public exploit
🧨 Has CISA KEV exploit
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
pyyaml:4.2b1
Detected Vulnerabilities:
CVE-2020-14343, Severity: Critical, Source: https://github.com/advisories/GHSA-8q59-q68h-6hv4
CVSS score: 9.8, CVSS exploitability score: 3.9
🩹 Fixed version: 5.4.0
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2020-1747, Severity: Critical, Source: https://github.com/advisories/GHSA-6757-jp84-gxfx
CVSS score: 9.8, CVSS exploitability score: 3.9
🩹 Fixed version: 5.3.1
💥 Has public exploit
🧨 Has CISA KEV exploit
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
urllib3:1.25.9
Detected Vulnerabilities:
CVE-2023-43804, Severity: Medium, Source: https://github.com/advisories/GHSA-v845-jxx5-vc9f
CVSS score: 8.1, CVSS exploitability score: 2.8
🩹 Fixed version: 1.26.17
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2021-33503, Severity: High, Source: https://github.com/advisories/GHSA-q2q7-5pp4-w6pg
CVSS score: 7.5, CVSS exploitability score: 3.9
🩹 Fixed version: 1.26.5
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2023-45803, Severity: Medium, Source: https://github.com/advisories/GHSA-g4mx-q9vg-27p4
CVSS score: 4.2, CVSS exploitability score: 0.5
🩹 Fixed version: 1.26.18
💥 Has public exploit
🧨 Has CISA KEV exploit
wiz-inc-98909e62bd / Wiz Vulnerability Scanner
requests:2.20
Detected Vulnerabilities:
CVE-2023-32681, Severity: Medium, Source: https://github.com/advisories/GHSA-j8r2-6x86-q33q
CVSS score: 6.1, CVSS exploitability score: 1.6
🩹 Fixed version: 2.31.0
💥 Has public exploit
🧨 Has CISA KEV exploit
CVE-2024-35195, Severity: Medium, Source: https://github.com/advisories/GHSA-9wx4-h78v-vm56
🩹 Fixed version: 2.32.0
💥 Has public exploit
🧨 Has CISA KEV exploit
Loading