Skip to content

Commit 0a29304

Browse files
committed
Update React Flight/Next.js RCE advisory patches
Updated dependencies to fix Next.js CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent c0c6ce3 commit 0a29304

File tree

2 files changed

+48
-48
lines changed

2 files changed

+48
-48
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
"clsx": "^2.1.1",
2323
"ethers": "^6.15.0",
2424
"magic-sdk": "^31.0.0",
25-
"next": "15.5.2",
25+
"next": "15.5.7",
2626
"next-auth": "^4.24.11",
2727
"prismjs": "^1.30.0",
2828
"react": "19.1.0",

pnpm-lock.yaml

Lines changed: 47 additions & 47 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)