From 3f177df36c833ca50a6deee95e621c61d57dd983 Mon Sep 17 00:00:00 2001 From: Vercel Date: Thu, 11 Dec 2025 15:09:27 +0000 Subject: [PATCH] Update React Flight RCE vulnerability patches Updated dependencies to fix Next.js CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package-lock.json | 16 ++++++++-------- package.json | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6eee17d..a9bb8f1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -24,7 +24,7 @@ "clsx": "^2.1.1", "lucide-react": "^0.525.0", "motion": "^12.23.3", - "next": "15.3.5", + "next": "15.3.6", "prisma": "^6.11.1", "qrcode.react": "^4.2.0", "react": "^19.0.0", @@ -827,9 +827,9 @@ } }, "node_modules/@next/env": { - "version": "15.3.5", - "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.5.tgz", - "integrity": "sha512-7g06v8BUVtN2njAX/r8gheoVffhiKFVt4nx74Tt6G4Hqw9HCLYQVx/GkH2qHvPtAHZaUNZ0VXAa0pQP6v1wk7g==", + "version": "15.3.6", + "resolved": "https://registry.npmjs.org/@next/env/-/env-15.3.6.tgz", + "integrity": "sha512-/cK+QPcfRbDZxmI/uckT4lu9pHCfRIPBLqy88MhE+7Vg5hKrEYc333Ae76dn/cw2FBP2bR/GoK/4DU+U7by/Nw==", "license": "MIT" }, "node_modules/@next/eslint-plugin-next": { @@ -6054,12 +6054,12 @@ "license": "MIT" }, "node_modules/next": { - "version": "15.3.5", - "resolved": "https://registry.npmjs.org/next/-/next-15.3.5.tgz", - "integrity": "sha512-RkazLBMMDJSJ4XZQ81kolSpwiCt907l0xcgcpF4xC2Vml6QVcPNXW0NQRwQ80FFtSn7UM52XN0anaw8TEJXaiw==", + "version": "15.3.6", + "resolved": "https://registry.npmjs.org/next/-/next-15.3.6.tgz", + "integrity": "sha512-oI6D1zbbsh6JzzZFDCSHnnx6Qpvd1fSkVJu/5d8uluqnxzuoqtodVZjYvNovooznUq8udSAiKp7MbwlfZ8Gm6w==", "license": "MIT", "dependencies": { - "@next/env": "15.3.5", + "@next/env": "15.3.6", "@swc/counter": "0.1.3", "@swc/helpers": "0.5.15", "busboy": "1.6.0", diff --git a/package.json b/package.json index 406edd2..fa0c973 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,7 @@ "clsx": "^2.1.1", "lucide-react": "^0.525.0", "motion": "^12.23.3", - "next": "15.3.5", + "next": "15.3.6", "prisma": "^6.11.1", "qrcode.react": "^4.2.0", "react": "^19.0.0",