Location and Paths Forensics for your Vulnerability Findings

A grid of light purple shopping bag icons with one prominent dark purple bag icon in the center. The word upwind is in the top left corner. The background is white with a mix of solid and outlined icons.

Feb 13, 2025

We are excited to introduce a new functionality in the Upwind platform that directly addresses a key challenge in vulnerability management: quickly pinpointing the location of specific package versions. With this enhancement, you can now effortlessly track where your vulnerabilities reside, eliminating guesswork and speeding up your response time.

Understanding the full impact and scope of a vulnerability is critical to taking effective action. Upwind has always provided deep context for every new vulnerability finding, including:

CVE: Information about the unique CVE and its potential impact on your environment.
Package: The package where this vulnerability is found in your environment.
Image: The image running in the vulnerable package.
Resource: The resource that is impacted by this finding.
Build context: Comprehensive context about build-time changes that impact this vulnerability, including the specific pull request and developer.

Screenshot of the Upwind dashboard showing a vulnerability analysis. On the left, it lists vulnerabilities with CVE-2021-44832 highlighted. The main section displays an overview and risk analysis of the liberant1-data exfiltration service.

Building on these capabilities, our latest update now delivers even deeper context by showing the precise package version location. This gives you:

Package location display: the finding details now show the exact location of the package version
Powered by SBOM: This data is sourced directly from the SBOM generated by Upwind, making it easier to track and resolve vulnerabilities quickly
Faster debugging: No more searching for where the affected package version is stored – it’s now visible at a glance.

Screenshot of a vulnerability report from Upwind titled CVE-2021-46848 | LibBami Data Exfiltration. The status is Open, severity is Critical, and the affected resource is a Kubernetes deployment. Various tabs and options are visible.

Use Upwind’s vulnerability management capabilities to quickly prioritize your most critical risks, streamline investigations with ease, and achieve peace of mind by reducing your mean time to remediation. To learn more about how Upwind supercharges vulnerability management, schedule a demo today.

Image showing six logos in circular frames on a wavy blue and white background. Logos include a whale, a geometric shape, a cat silhouette, a circuit design, a star-like shape, and a four-pointed structure. Upwind text is in the top left corner.

Product

Proactive Protect GenAI Workloads with Upwind GenAI Security

By Joshua Burgin

Mar 27, 2025

We are thrilled to announce a major breakthrough in AI security with the release of Upwind GenAI Security. AI is transforming industries at an unprecedented pace, but without the right security measures, it becomes an ungoverned risk. Organizations need purpose-built protections that evolve with the complexity of AI workloads. This is a first-of-its-kind solution that […]

Geometric pattern of light blue arrows pointing right with one dark blue arrow pointing left in the center. The word upwind is in black at the top left corner. The background is white.

Product

Enhancing CI/CD Pipeline Security with Upwind

By Steven Duckaert

Mar 26, 2025

In today’s fast-paced DevOps world, security can no longer be an afterthought. Shift Left Security aims to integrate security checks earlier in the software development lifecycle, ensuring vulnerabilities are detected and remediated before they reach production. In this article, we explore how Upwind Shift Left seamlessly integrates into a GitHub Actions CI/CD pipeline, automating image […]

Pink, yellow, and red circles with shield and gear icons are scattered across a white background. The word upwind is in the top left corner. One central red circle is prominently highlighted.

Product

Streamline Cloud Threat Detection and Response with Upwind’s Major Threats Module Enhancements

By Denise Ashur

Mar 23, 2025

Cloud security teams are drowning in alerts, struggling to prioritize real threats among endless notifications. To help security professionals cut through the noise, we are thrilled to announce major enhancements to our Threats Module, further empowering security professionals to understand deep context for every threat detection, identify emerging threat actors, and respond to threats faster. […]

Location and Paths Forensics for your Vulnerability Findings