Skip to content

Commit 672f2a6

Browse files
authored
Fix React Server Components CVE vulnerabilities (#49)
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent 99253cf commit 672f2a6

File tree

2 files changed

+44
-42
lines changed

2 files changed

+44
-42
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
"cobe": "^0.6.5",
2020
"lucide-react": "^0.519.0",
2121
"motion": "^12.23.12",
22-
"next": "15.3.4",
22+
"next": "15.3.8",
2323
"next-themes": "^0.4.6",
2424
"react": "^19.1.1",
2525
"react-dom": "^19.1.1",

pnpm-lock.yaml

Lines changed: 43 additions & 41 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)