From 23c96c586651af4ef21b73dc1cb1ce69c45b8f02 Mon Sep 17 00:00:00 2001 From: Vercel Date: Mon, 19 Jan 2026 23:42:50 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package-lock.json | 80 ++++++++++++++++---------------- package.json | 2 +- prisma/generated/prisma/edge.js | 9 ++-- prisma/generated/prisma/index.js | 13 ++---- prisma/generated/prisma/wasm.js | 9 ++-- 5 files changed, 53 insertions(+), 60 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9bf353d..6f00388 100644 --- a/package-lock.json +++ b/package-lock.json @@ -20,7 +20,7 @@ "gsap": "^3.13.0", "jose": "^6.1.0", "lucide-react": "^0.544.0", - "next": "^16.0.7", + "next": "16.0.10", "next-auth": "^5.0.0-beta.29", "react": "^19.1.2", "react-dom": "^19.1.2", @@ -1561,9 +1561,9 @@ } }, "node_modules/@next/env": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/env/-/env-16.0.7.tgz", - "integrity": "sha512-gpaNgUh5nftFKRkRQGnVi5dpcYSKGcZZkQffZ172OrG/XkrnS7UBTQ648YY+8ME92cC4IojpI2LqTC8sTDhAaw==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/env/-/env-16.0.10.tgz", + "integrity": "sha512-8tuaQkyDVgeONQ1MeT9Mkk8pQmZapMKFh5B+OrFUlG3rVmYTXcXlBetBgTurKXGaIZvkoqRT9JL5K3phXcgang==", "license": "MIT" }, "node_modules/@next/eslint-plugin-next": { @@ -1577,9 +1577,9 @@ } }, "node_modules/@next/swc-darwin-arm64": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.0.7.tgz", - "integrity": "sha512-LlDtCYOEj/rfSnEn/Idi+j1QKHxY9BJFmxx7108A6D8K0SB+bNgfYQATPk/4LqOl4C0Wo3LACg2ie6s7xqMpJg==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.0.10.tgz", + "integrity": "sha512-4XgdKtdVsaflErz+B5XeG0T5PeXKDdruDf3CRpnhN+8UebNa5N2H58+3GDgpn/9GBurrQ1uWW768FfscwYkJRg==", "cpu": [ "arm64" ], @@ -1593,9 +1593,9 @@ } }, "node_modules/@next/swc-darwin-x64": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.0.7.tgz", - "integrity": "sha512-rtZ7BhnVvO1ICf3QzfW9H3aPz7GhBrnSIMZyr4Qy6boXF0b5E3QLs+cvJmg3PsTCG2M1PBoC+DANUi4wCOKXpA==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.0.10.tgz", + "integrity": "sha512-spbEObMvRKkQ3CkYVOME+ocPDFo5UqHb8EMTS78/0mQ+O1nqE8toHJVioZo4TvebATxgA8XMTHHrScPrn68OGw==", "cpu": [ "x64" ], @@ -1609,9 +1609,9 @@ } }, "node_modules/@next/swc-linux-arm64-gnu": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.0.7.tgz", - "integrity": "sha512-mloD5WcPIeIeeZqAIP5c2kdaTa6StwP4/2EGy1mUw8HiexSHGK/jcM7lFuS3u3i2zn+xH9+wXJs6njO7VrAqww==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.0.10.tgz", + "integrity": "sha512-uQtWE3X0iGB8apTIskOMi2w/MKONrPOUCi5yLO+v3O8Mb5c7K4Q5KD1jvTpTF5gJKa3VH/ijKjKUq9O9UhwOYw==", "cpu": [ "arm64" ], @@ -1625,9 +1625,9 @@ } }, "node_modules/@next/swc-linux-arm64-musl": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.0.7.tgz", - "integrity": "sha512-+ksWNrZrthisXuo9gd1XnjHRowCbMtl/YgMpbRvFeDEqEBd523YHPWpBuDjomod88U8Xliw5DHhekBC3EOOd9g==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.0.10.tgz", + "integrity": "sha512-llA+hiDTrYvyWI21Z0L1GiXwjQaanPVQQwru5peOgtooeJ8qx3tlqRV2P7uH2pKQaUfHxI/WVarvI5oYgGxaTw==", "cpu": [ "arm64" ], @@ -1641,9 +1641,9 @@ } }, "node_modules/@next/swc-linux-x64-gnu": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.0.7.tgz", - "integrity": "sha512-4WtJU5cRDxpEE44Ana2Xro1284hnyVpBb62lIpU5k85D8xXxatT+rXxBgPkc7C1XwkZMWpK5rXLXTh9PFipWsA==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.0.10.tgz", + "integrity": "sha512-AK2q5H0+a9nsXbeZ3FZdMtbtu9jxW4R/NgzZ6+lrTm3d6Zb7jYrWcgjcpM1k8uuqlSy4xIyPR2YiuUr+wXsavA==", "cpu": [ "x64" ], @@ -1657,9 +1657,9 @@ } }, "node_modules/@next/swc-linux-x64-musl": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.0.7.tgz", - "integrity": "sha512-HYlhqIP6kBPXalW2dbMTSuB4+8fe+j9juyxwfMwCe9kQPPeiyFn7NMjNfoFOfJ2eXkeQsoUGXg+O2SE3m4Qg2w==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.0.10.tgz", + "integrity": "sha512-1TDG9PDKivNw5550S111gsO4RGennLVl9cipPhtkXIFVwo31YZ73nEbLjNC8qG3SgTz/QZyYyaFYMeY4BKZR/g==", "cpu": [ "x64" ], @@ -1673,9 +1673,9 @@ } }, "node_modules/@next/swc-win32-arm64-msvc": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.0.7.tgz", - "integrity": "sha512-EviG+43iOoBRZg9deGauXExjRphhuYmIOJ12b9sAPy0eQ6iwcPxfED2asb/s2/yiLYOdm37kPaiZu8uXSYPs0Q==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.0.10.tgz", + "integrity": "sha512-aEZIS4Hh32xdJQbHz121pyuVZniSNoqDVx1yIr2hy+ZwJGipeqnMZBJHyMxv2tiuAXGx6/xpTcQJ6btIiBjgmg==", "cpu": [ "arm64" ], @@ -1689,9 +1689,9 @@ } }, "node_modules/@next/swc-win32-x64-msvc": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.0.7.tgz", - "integrity": "sha512-gniPjy55zp5Eg0896qSrf3yB1dw4F/3s8VK1ephdsZZ129j2n6e1WqCbE2YgcKhW9hPB9TVZENugquWJD5x0ug==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.0.10.tgz", + "integrity": "sha512-E+njfCoFLb01RAFEnGZn6ERoOqhK1Gl3Lfz1Kjnj0Ulfu7oJbuMyvBKNj/bw8XZnenHDASlygTjZICQW+rYW1Q==", "cpu": [ "x64" ], @@ -8065,12 +8065,12 @@ "peer": true }, "node_modules/next": { - "version": "16.0.7", - "resolved": "https://registry.npmjs.org/next/-/next-16.0.7.tgz", - "integrity": "sha512-3mBRJyPxT4LOxAJI6IsXeFtKfiJUbjCLgvXO02fV8Wy/lIhPvP94Fe7dGhUgHXcQy4sSuYwQNcOLhIfOm0rL0A==", + "version": "16.0.10", + "resolved": "https://registry.npmjs.org/next/-/next-16.0.10.tgz", + "integrity": "sha512-RtWh5PUgI+vxlV3HdR+IfWA1UUHu0+Ram/JBO4vWB54cVPentCD0e+lxyAYEsDTqGGMg7qpjhKh6dc6aW7W/sA==", "license": "MIT", "dependencies": { - "@next/env": "16.0.7", + "@next/env": "16.0.10", "@swc/helpers": "0.5.15", "caniuse-lite": "^1.0.30001579", "postcss": "8.4.31", @@ -8083,14 +8083,14 @@ "node": ">=20.9.0" }, "optionalDependencies": { - "@next/swc-darwin-arm64": "16.0.7", - "@next/swc-darwin-x64": "16.0.7", - "@next/swc-linux-arm64-gnu": "16.0.7", - "@next/swc-linux-arm64-musl": "16.0.7", - "@next/swc-linux-x64-gnu": "16.0.7", - "@next/swc-linux-x64-musl": "16.0.7", - "@next/swc-win32-arm64-msvc": "16.0.7", - "@next/swc-win32-x64-msvc": "16.0.7", + "@next/swc-darwin-arm64": "16.0.10", + "@next/swc-darwin-x64": "16.0.10", + "@next/swc-linux-arm64-gnu": "16.0.10", + "@next/swc-linux-arm64-musl": "16.0.10", + "@next/swc-linux-x64-gnu": "16.0.10", + "@next/swc-linux-x64-musl": "16.0.10", + "@next/swc-win32-arm64-msvc": "16.0.10", + "@next/swc-win32-x64-msvc": "16.0.10", "sharp": "^0.34.4" }, "peerDependencies": { diff --git a/package.json b/package.json index fd3e4a0..b363f21 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "gsap": "^3.13.0", "jose": "^6.1.0", "lucide-react": "^0.544.0", - "next": "^16.0.7", + "next": "16.0.10", "next-auth": "^5.0.0-beta.29", "react": "^19.1.2", "react-dom": "^19.1.2", diff --git a/prisma/generated/prisma/edge.js b/prisma/generated/prisma/edge.js index 777685e..793600a 100644 --- a/prisma/generated/prisma/edge.js +++ b/prisma/generated/prisma/edge.js @@ -612,7 +612,7 @@ const config = { "value": "prisma-client-js" }, "output": { - "value": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/generated/prisma", + "value": "/vercel/sandbox/primary/prisma/generated/prisma", "fromEnvVar": null }, "config": { @@ -621,7 +621,7 @@ const config = { "binaryTargets": [ { "fromEnvVar": null, - "value": "darwin-arm64", + "value": "rhel-openssl-3.0.x", "native": true }, { @@ -630,12 +630,11 @@ const config = { } ], "previewFeatures": [], - "sourceFilePath": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/schema.prisma", + "sourceFilePath": "/vercel/sandbox/primary/prisma/schema.prisma", "isCustomOutput": true }, "relativeEnvPaths": { - "rootEnvPath": null, - "schemaEnvPath": "../../../.env" + "rootEnvPath": null }, "relativePath": "../..", "clientVersion": "6.19.0", diff --git a/prisma/generated/prisma/index.js b/prisma/generated/prisma/index.js index d29189c..988ba2d 100644 --- a/prisma/generated/prisma/index.js +++ b/prisma/generated/prisma/index.js @@ -613,7 +613,7 @@ const config = { "value": "prisma-client-js" }, "output": { - "value": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/generated/prisma", + "value": "/vercel/sandbox/primary/prisma/generated/prisma", "fromEnvVar": null }, "config": { @@ -622,7 +622,7 @@ const config = { "binaryTargets": [ { "fromEnvVar": null, - "value": "darwin-arm64", + "value": "rhel-openssl-3.0.x", "native": true }, { @@ -631,12 +631,11 @@ const config = { } ], "previewFeatures": [], - "sourceFilePath": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/schema.prisma", + "sourceFilePath": "/vercel/sandbox/primary/prisma/schema.prisma", "isCustomOutput": true }, "relativeEnvPaths": { - "rootEnvPath": null, - "schemaEnvPath": "../../../.env" + "rootEnvPath": null }, "relativePath": "../..", "clientVersion": "6.19.0", @@ -693,10 +692,6 @@ const PrismaClient = getPrismaClient(config) exports.PrismaClient = PrismaClient Object.assign(exports, Prisma) -// file annotations for bundling tools to include these files -path.join(__dirname, "libquery_engine-darwin-arm64.dylib.node"); -path.join(process.cwd(), "prisma/generated/prisma/libquery_engine-darwin-arm64.dylib.node") - // file annotations for bundling tools to include these files path.join(__dirname, "libquery_engine-rhel-openssl-3.0.x.so.node"); path.join(process.cwd(), "prisma/generated/prisma/libquery_engine-rhel-openssl-3.0.x.so.node") diff --git a/prisma/generated/prisma/wasm.js b/prisma/generated/prisma/wasm.js index 6b39f74..2a12235 100644 --- a/prisma/generated/prisma/wasm.js +++ b/prisma/generated/prisma/wasm.js @@ -612,7 +612,7 @@ const config = { "value": "prisma-client-js" }, "output": { - "value": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/generated/prisma", + "value": "/vercel/sandbox/primary/prisma/generated/prisma", "fromEnvVar": null }, "config": { @@ -621,7 +621,7 @@ const config = { "binaryTargets": [ { "fromEnvVar": null, - "value": "darwin-arm64", + "value": "rhel-openssl-3.0.x", "native": true }, { @@ -630,12 +630,11 @@ const config = { } ], "previewFeatures": [], - "sourceFilePath": "/Users/ramonm.m/Developer/Projects/DigitalRevolution/my-project/prisma/schema.prisma", + "sourceFilePath": "/vercel/sandbox/primary/prisma/schema.prisma", "isCustomOutput": true }, "relativeEnvPaths": { - "rootEnvPath": null, - "schemaEnvPath": "../../../.env" + "rootEnvPath": null }, "relativePath": "../..", "clientVersion": "6.19.0",