From 15f29494dddc5692beb5a49b56c9a06e30cdf126 Mon Sep 17 00:00:00 2001 From: Vercel Date: Wed, 7 Jan 2026 20:02:43 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 802a59d..2142636 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,7 @@ "@auth0/nextjs-auth0": "^3.5.0", "chart.js": "^4.4.7", "cookies-next": "^5.0.2", - "next": "15.0.2", + "next": "15.0.7", "next-intl": "^3.25.3", "plotly.js": "^3.0.1", "react": "19.0.0-rc-02c0e824-20241028",