Yes, it can happen with our remediation logic. When looking for upgrade paths, our remediation checks against the vulnerabilities that were detected in the original project tree.
Submit a Support ticket Sign in to Support Sign up for free
Fixing Vulnerabilities
- Cannot create a Fix PR
- Can patching break my code?
- Failed to detect issues
- Failed to update the yarn.lock, please update manually before merging.
- Fixed in version vs. fixable attribute in vulnerabilities
- How are Snyk patches created?
- How are Snyk patches tested?
- Is it possible that a fix pull request could introduce new vulnerabilities?
- Snyk changed the "resolved" URL's in my Lock file
- What can I do if I'm vulnerable?