Skip to content

Commit 2966853

Browse files
authored
fix: Updated Next Version for CVE-2025-66478 (#133)
1 parent 1e8b9aa commit 2966853

4 files changed

Lines changed: 264 additions & 165 deletions

File tree

frontend/next.config.js

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,11 @@ const nextConfig = {
1717
// Output only the necessary files for a deployment, excluding irrelevant node_modules
1818
// https://nextjs.org/docs/app/api-reference/next-config-js/output
1919
output: "standalone",
20+
// Exclude esbuild from standalone output - it's a devDependency (from Storybook)
21+
// that shouldn't be needed at runtime and contains Go binaries with vulnerabilities
22+
outputFileTracingExcludes: {
23+
"*": ["node_modules/@esbuild/**", "node_modules/esbuild/**"],
24+
},
2025
// Continue to support older browsers (ES5)
2126
transpilePackages: [],
2227

0 commit comments

Comments
 (0)