From 9ebd7d2afebd2ab8bae000c3693a3bb926b0100a Mon Sep 17 00:00:00 2001 From: Vercel Date: Sat, 20 Dec 2025 18:26:41 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package-lock.json | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index e2be3ac..bc26115 100644 --- a/package-lock.json +++ b/package-lock.json @@ -22,7 +22,7 @@ "flowbite": "^1.6.5", "flowbite-react": "^0.4.4", "framer-motion": "^10.12.14", - "next": "^15.5.4", + "next": "15.5.9", "next-themes": "^0.2.1", "postcss": "^8.4.31", "react": "18.2.0", diff --git a/package.json b/package.json index 88edf47..73405ab 100644 --- a/package.json +++ b/package.json @@ -29,7 +29,7 @@ "flowbite": "^1.6.5", "flowbite-react": "^0.4.4", "framer-motion": "^10.12.14", - "next": "^15.5.4", + "next": "15.5.9", "next-themes": "^0.2.1", "postcss": "^8.4.31", "react": "18.2.0",