[Snyk] Security upgrade next from 14.2.8 to 14.2.35#19
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14400636
✅ Deploy Preview for comfy-crostata-209e70 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR upgrades Next.js from version 14.2.8 to 14.2.35 to address a high-severity security vulnerability (SNYK-JS-NEXT-14400636) related to deserialization of untrusted data with a severity score of 852/1000.
Key Changes:
- Updates the
nextpackage from 14.2.8 to 14.2.35 in dependencies - Updates all associated Next.js packages including
@next/envand platform-specific SWC binaries - Addresses critical security vulnerability in the Next.js framework
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Updates Next.js dependency version specification from 14.2.8 to 14.2.35 |
| package-lock.json | Updates resolved versions and integrity hashes for Next.js core package, @next/env, and all platform-specific SWC compiler binaries |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-NEXT-14400636
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Deserialization of Untrusted Data