From 3571015d8935781f6ebb7cc19b6d4e63b692c893 Mon Sep 17 00:00:00 2001 From: Vercel Date: Sun, 14 Dec 2025 06:46:54 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 1e8d6c1..2b5dff6 100644 --- a/package.json +++ b/package.json @@ -79,7 +79,7 @@ "input-otp": "^1.4.2", "lucide-react": "^0.501.0", "motion": "^12.9.4", - "next": "^15.2.3", + "next": "15.2.8", "next-themes": "^0.4.6", "octokit": "^4.1.3", "react": "^19.0.0", @@ -121,4 +121,4 @@ "ct3aMetadata": { "initVersion": "7.39.3" } -} \ No newline at end of file +}