/wiz-form-data-bug

wiz code scan bug

Install the dependencies:

npm ci

Then scan the code:

wizcli dir scan --path . --no-publish --sensitive-data --file-hashes-scan

Boom:

Library vulnerabilities:
    Name: form-data, Version: 4.0.3, Path: /node_modules/jsdom/package.json
        Failed policy: Default vulnerabilities policy
        CVE-2025-7783, Severity: CRITICAL, Source: https://github.com/advisories/GHSA-fjxv-7rqg-78g4
            CVSS score: 9.4
            🩹 Fixed version: 4.0.4

Even though:

❯ jq .version node_modules/form-data/package.json
"4.0.4"