From 75200255e6b8ac5f5eeaf0867bd6d88a8e57ea8c Mon Sep 17 00:00:00 2001 From: Vercel Date: Thu, 11 Dec 2025 22:02:06 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 2 +- pnpm-lock.yaml | 32 ++++++++++++++++---------------- 2 files changed, 17 insertions(+), 17 deletions(-) diff --git a/package.json b/package.json index 101f9ba..d897748 100644 --- a/package.json +++ b/package.json @@ -13,7 +13,7 @@ "date-fns": "3.6.0", "dinero.js": "2.0.0-alpha.8", "geist": "1.3.1", - "next": "^15.6.0-canary.58", + "next": "15.6.0-canary.59", "react": "19.0.0-rc-8b08e99e-20240713", "react-dom": "19.0.0-rc-8b08e99e-20240713" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index f7d9ddb..22e956e 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -22,10 +22,10 @@ importers: version: 2.0.0-alpha.8 geist: specifier: 1.3.1 - version: 1.3.1(next@15.6.0-canary.58(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713)) + version: 1.3.1(next@15.6.0-canary.59(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713)) next: - specifier: ^15.6.0-canary.58 - version: 15.6.0-canary.58(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713) + specifier: 15.6.0-canary.59 + version: 15.6.0-canary.59(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713) react: specifier: 19.0.0-rc-8b08e99e-20240713 version: 19.0.0-rc-8b08e99e-20240713 @@ -365,8 +365,8 @@ packages: '@napi-rs/wasm-runtime@0.2.12': resolution: {integrity: sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==} - '@next/env@15.6.0-canary.58': - resolution: {integrity: sha512-JyYhiCaCYgLfs3a195cncgUfyATTvtIpK2L9wpka4JdJ/Cn58LxO2WRQysmWYXWjuCTgE9n4vjWDAJcWmRisiw==} + '@next/env@15.6.0-canary.59': + resolution: {integrity: sha512-D5msVvBiiJrqAW3MPXP4rR7teMeCcMLCK3yTSCGM4XuuzAcO8Eb4RZtbSPS0zgvFKu9r5hv5eaTXlNmgNmZ5TQ==} '@next/eslint-plugin-next@15.6.0-canary.58': resolution: {integrity: sha512-WagG5hd/drlvGgS/tmOq+3rrOhTNKO1RuhrFiz+nNX5iONUY/mDEZwRwR805vLw5X9zbaxQFKiDQUMJopP5PKQ==} @@ -1543,8 +1543,8 @@ packages: natural-compare@1.4.0: resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==} - next@15.6.0-canary.58: - resolution: {integrity: sha512-crPQo+AxBCmmBFMpDLbFg1uH+ArvrPNkvsviM60wrlzmhNuQyIOQ0tHL7Y10BVlxqtM7esMDQnepKT1XJBqYBQ==} + next@15.6.0-canary.59: + resolution: {integrity: sha512-FOKHnHEVqtbMj2eQfgRgEkzEds/hqjz5JRBjLhT7UgPtvs36Vzc7RU9mh8lOZt/TONS7jVs+5ilv194QA/wdnQ==} engines: {node: '>=20.9.0'} hasBin: true peerDependencies: @@ -2420,7 +2420,7 @@ snapshots: '@tybys/wasm-util': 0.10.1 optional: true - '@next/env@15.6.0-canary.58': {} + '@next/env@15.6.0-canary.59': {} '@next/eslint-plugin-next@15.6.0-canary.58': dependencies: @@ -2809,7 +2809,7 @@ snapshots: browserslist@4.23.2: dependencies: - caniuse-lite: 1.0.30001642 + caniuse-lite: 1.0.30001759 electron-to-chromium: 1.4.830 node-releases: 2.0.17 update-browserslist-db: 1.1.0(browserslist@4.23.2) @@ -3363,9 +3363,9 @@ snapshots: functions-have-names@1.2.3: {} - geist@1.3.1(next@15.6.0-canary.58(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713)): + geist@1.3.1(next@15.6.0-canary.59(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713)): dependencies: - next: 15.6.0-canary.58(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713) + next: 15.6.0-canary.59(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713) generator-function@2.0.1: {} @@ -3740,11 +3740,11 @@ snapshots: natural-compare@1.4.0: {} - next@15.6.0-canary.58(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713): + next@15.6.0-canary.59(@babel/core@7.28.5)(react-dom@19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713))(react@19.0.0-rc-8b08e99e-20240713): dependencies: - '@next/env': 15.6.0-canary.58 + '@next/env': 15.6.0-canary.59 '@swc/helpers': 0.5.15 - caniuse-lite: 1.0.30001642 + caniuse-lite: 1.0.30001759 postcss: 8.4.31 react: 19.0.0-rc-8b08e99e-20240713 react-dom: 19.0.0-rc-8b08e99e-20240713(react@19.0.0-rc-8b08e99e-20240713) @@ -3914,7 +3914,7 @@ snapshots: postcss@8.4.31: dependencies: nanoid: 3.3.7 - picocolors: 1.0.1 + picocolors: 1.1.1 source-map-js: 1.2.0 postcss@8.4.39: @@ -4358,7 +4358,7 @@ snapshots: dependencies: browserslist: 4.23.2 escalade: 3.1.2 - picocolors: 1.0.1 + picocolors: 1.1.1 update-browserslist-db@1.2.2(browserslist@4.28.1): dependencies: