Skip to content

Commit 21b6142

Browse files
authored
Fix React Server Components CVE vulnerabilities (#157)
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent a72196c commit 21b6142

File tree

4 files changed

+98
-98
lines changed

4 files changed

+98
-98
lines changed

lib/next-boilerplate/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
"lint": "eslint"
1010
},
1111
"dependencies": {
12-
"next": "16.0.9",
12+
"next": "16.0.10",
1313
"react": "19.2.0",
1414
"react-dom": "19.2.0"
1515
},

lib/next-boilerplate/pnpm-lock.yaml

Lines changed: 41 additions & 41 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@
4545
"lucide-react": "^0.552.0",
4646
"motion": "^12.23.24",
4747
"nanoid": "^5.1.6",
48-
"next": "16.0.9",
48+
"next": "16.0.10",
4949
"next-themes": "^0.4.6",
5050
"openai": "^6.8.1",
5151
"postgres": "^3.4.7",

0 commit comments

Comments
 (0)