Skip to content

Commit 97d5190

Browse files
committed
Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent a9b82bb commit 97d5190

2 files changed

Lines changed: 40 additions & 41 deletions

File tree

apps/web/package.json

Lines changed: 33 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,35 @@
11
{
2-
"name": "web",
3-
"version": "1.0.0",
4-
"private": true,
5-
"scripts": {
6-
"dev": "next dev",
7-
"build": "next build",
8-
"start": "next start",
9-
"lint": "tsc --noEmit",
10-
"test": "echo \"No tests yet\""
11-
},
12-
"dependencies": {
13-
"@fairshare/shared-types": "workspace:*",
14-
"@supabase/ssr": "^0.9.0",
15-
"@supabase/supabase-js": "^2.100.1",
16-
"@types/gsap": "^3.0.0",
17-
"framer-motion": "^12.35.0",
18-
"gsap": "^3.14.2",
19-
"lucide-react": "^0.577.0",
20-
"next": "15.2.6",
21-
"react": "19.0.0",
22-
"react-dom": "19.0.0",
23-
"resend": "^6.9.4",
24-
"socket.io-client": "^4.8.1"
25-
},
26-
"devDependencies": {
27-
"@types/node": "^22.10.2",
28-
"@types/react": "^19.0.7",
29-
"@types/react-dom": "^19.0.3",
30-
"autoprefixer": "^10.4.21",
31-
"postcss": "^8.5.3",
32-
"tailwindcss": "^3.4.17",
33-
"typescript": "^5.7.3"
34-
}
2+
"name": "web",
3+
"version": "1.0.0",
4+
"private": true,
5+
"scripts": {
6+
"dev": "next dev",
7+
"build": "next build",
8+
"start": "next start",
9+
"lint": "tsc --noEmit",
10+
"test": "echo \"No tests yet\""
11+
},
12+
"dependencies": {
13+
"@fairshare/shared-types": "workspace:*",
14+
"@supabase/ssr": "^0.9.0",
15+
"@supabase/supabase-js": "^2.100.1",
16+
"@types/gsap": "^3.0.0",
17+
"framer-motion": "^12.35.0",
18+
"gsap": "^3.14.2",
19+
"lucide-react": "^0.577.0",
20+
"next": "15.2.8",
21+
"react": "19.0.0",
22+
"react-dom": "19.0.0",
23+
"resend": "^6.9.4",
24+
"socket.io-client": "^4.8.1"
25+
},
26+
"devDependencies": {
27+
"@types/node": "^22.10.2",
28+
"@types/react": "^19.0.7",
29+
"@types/react-dom": "^19.0.3",
30+
"autoprefixer": "^10.4.21",
31+
"postcss": "^8.5.3",
32+
"tailwindcss": "^3.4.17",
33+
"typescript": "^5.7.3"
34+
}
3535
}

pnpm-lock.yaml

Lines changed: 7 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)