Skip to content

Commit 0e434df

Browse files
committed
Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent 695f06e commit 0e434df

File tree

2 files changed

+30
-35
lines changed

2 files changed

+30
-35
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@
5959
"leaflet": "^1.9.4",
6060
"lucide-react": "^0.469.0",
6161
"motion": "^12.11.0",
62-
"next": "^14.2.32",
62+
"next": "14.2.35",
6363
"next-query-params": "^5.0.1",
6464
"next-sitemap": "^4.2.3",
6565
"next-with-less": "^3.0.1",

pnpm-lock.yaml

Lines changed: 29 additions & 34 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)