From 76e1c3eb36f28523bd6beb6ccc8e7949003fff7a Mon Sep 17 00:00:00 2001 From: Vercel Date: Tue, 20 Jan 2026 15:03:32 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index ac385a9..c3ddd1c 100644 --- a/package.json +++ b/package.json @@ -64,7 +64,7 @@ "embla-carousel-react": "^8.5.2", "input-otp": "^1.4.2", "lucide-react": "^0.475.0", - "next": "15.1.7", + "next": "15.1.11", "next-themes": "^0.4.4", "react": "19.1.1", "react-day-picker": "^8.10.1",