chore: Artifact BOM generation - #3473
Conversation
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio. |
![wiz-4aec67d814[bot]](https://avatars.githubusercontent.com/u/1496237?s=60&v=4){kind=small}
| <dependency> | ||
| <groupId>io.netty</groupId> | ||
| <artifactId>netty-codec</artifactId> | ||
| <version>4.1.119.Final</version> |
There was a problem hiding this comment.
The following vulnerabilities impact io.netty:netty-codec versions <4.1.136.Final: CVE-2025-58057, CVE-2026-42583, CVE-2026-59901.
These can be remediated by updating to version 4.1.136.Final or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>4.1.119.Final</version> | |
| <version>4.1.136.Final</version> |
| <dependency> | ||
| <groupId>io.netty</groupId> | ||
| <artifactId>netty-handler</artifactId> | ||
| <version>4.1.119.Final</version> |
There was a problem hiding this comment.
The following vulnerabilities impact io.netty:netty-handler versions <4.1.135.Final: CVE-2026-44249, CVE-2026-45416, CVE-2026-50010.
These can be remediated by updating to version 4.1.135.Final or higher.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| <version>4.1.119.Final</version> | |
| <version>4.1.135.Final</version> |
2 participants
Generated pom.xml files in a second commit.