From 45fb78130636cbc3cd8ca07ace3db7fa4264a836 Mon Sep 17 00:00:00 2001 From: Vercel Date: Thu, 11 Dec 2025 09:30:24 +0000 Subject: [PATCH] Update React Flight/Next.js RCE vulnerability patches Updated dependencies to fix Next.js CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index de2241f..4655ade 100644 --- a/package.json +++ b/package.json @@ -16,7 +16,7 @@ "cheerio": "^1.1.2", "chrome-launcher": "^1.2.0", "lighthouse": "^12.8.2", - "next": "15.5.2", + "next": "15.5.7", "playwright-core": "^1.55.0", "react": "19.1.0", "react-dom": "19.1.0", @@ -34,4 +34,4 @@ "tailwindcss": "^4", "typescript": "^5" } -} \ No newline at end of file +}