[Snyk] Security upgrade next from 14.2.32 to 14.2.35#1305
[Snyk] Security upgrade next from 14.2.32 to 14.2.35#1305
Conversation
…uce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BABELHELPERS-9397697 - https://snyk.io/vuln/SNYK-JS-PLAYWRIGHT-14888269 - https://snyk.io/vuln/SNYK-JS-PLAYWRIGHTCORE-13553173
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull request overview
This is a Snyk-generated security PR that upgrades Next.js from 14.2.32 to 14.2.35 in the app-router example project. The upgrade addresses three security vulnerabilities: a medium-severity ReDoS issue in babel-helpers, a high-severity exposed dangerous method in playwright, and a medium-severity cryptographic signature verification issue in playwright-core.
Key changes:
- Upgrades Next.js from 14.2.32 to 14.2.35 (patch version update)
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "dependencies": { | ||
| "@descope/nextjs-sdk": "workspace:*", | ||
| "next": "14.2.32", | ||
| "next": "14.2.35", |
There was a problem hiding this comment.
The pnpm-lock.yaml file should be updated to reflect this dependency change. According to the lint-staged configuration in the root package.json, running pnpm i should update the lock file automatically. Please ensure the lock file is included in this PR to maintain dependency consistency across the monorepo.
Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
packages/sdks/nextjs-sdk/examples/app-router/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-BABELHELPERS-9397697
SNYK-JS-PLAYWRIGHT-14888269
SNYK-JS-PLAYWRIGHTCORE-13553173
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)