From 370926749fe7efbe499fbb4cbb4704280a7b8d71 Mon Sep 17 00:00:00 2001 From: Vercel Date: Sun, 22 Feb 2026 15:59:58 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 4 +-- pnpm-lock.yaml | 80 +++++++++++++++++++++++++------------------------- 2 files changed, 42 insertions(+), 42 deletions(-) diff --git a/package.json b/package.json index 524858e..5bbc2a7 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "gray-matter": "^4.0.3", "lodash.debounce": "^4.0.8", "lodash.throttle": "^4.1.1", - "next": "^15.3.2", + "next": "15.3.8", "next-themes": "^0.4.6", "react": "^19.1.0", "react-dom": "^19.1.0", @@ -46,4 +46,4 @@ "typescript": "^5.8.3" }, "packageManager": "pnpm@8.6.3+sha512.d18e277ae8072091046bccbca0931f77dc3080791cd6122ae890bf504125d8af76b37fb33da287dba9fbbb6da6ebb13e314e9fa4a464c7effe3d8599cebe7243" -} \ No newline at end of file +} diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2320dc0..fc03c03 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -7,10 +7,10 @@ settings: dependencies: '@keystatic/core': specifier: ^0.5.47 - version: 0.5.47(next@15.3.2)(react-dom@19.1.0)(react@19.1.0) + version: 0.5.47(next@15.3.8)(react-dom@19.1.0)(react@19.1.0) '@keystatic/next': specifier: ^5.0.4 - version: 5.0.4(@keystatic/core@0.5.47)(next@15.3.2)(react-dom@19.1.0)(react@19.1.0) + version: 5.0.4(@keystatic/core@0.5.47)(next@15.3.8)(react-dom@19.1.0)(react@19.1.0) '@markdoc/markdoc': specifier: ^0.5.2 version: 0.5.2(@types/react@19.1.5)(react@19.1.0) @@ -30,8 +30,8 @@ dependencies: specifier: ^4.1.1 version: 4.1.1 next: - specifier: ^15.3.2 - version: 15.3.2(react-dom@19.1.0)(react@19.1.0) + specifier: 15.3.8 + version: 15.3.8(react-dom@19.1.0)(react@19.1.0) next-themes: specifier: ^0.4.6 version: 0.4.6(react-dom@19.1.0)(react@19.1.0) @@ -756,7 +756,7 @@ packages: resolution: {integrity: sha512-dfLbk+PwWvFzSxwk3n5ySL0hfBog779o8h68wK/7/APo/7cgyWp5jcXockbxdk5kFRkbeXWm4Fbi9FrdN381sA==} dev: false - /@keystar/ui@0.7.19(next@15.3.2)(react-dom@19.1.0)(react@19.1.0): + /@keystar/ui@0.7.19(next@15.3.8)(react-dom@19.1.0)(react@19.1.0): resolution: {integrity: sha512-8yXXli2w6rzK4wYQ1LNjznV2v08SkKHdLDWCOaCffuQkULZRGU7oRZJIYTEqCRy8b6K3frbIuhqyRcKzEv+xgA==} peerDependencies: next: '>=14' @@ -854,14 +854,14 @@ packages: '@types/react': 19.1.5 emery: 1.4.4 facepaint: 1.2.1 - next: 15.3.2(react-dom@19.1.0)(react@19.1.0) + next: 15.3.8(react-dom@19.1.0)(react@19.1.0) react: 19.1.0 react-dom: 19.1.0(react@19.1.0) transitivePeerDependencies: - supports-color dev: false - /@keystatic/core@0.5.47(next@15.3.2)(react-dom@19.1.0)(react@19.1.0): + /@keystatic/core@0.5.47(next@15.3.8)(react-dom@19.1.0)(react@19.1.0): resolution: {integrity: sha512-GeXfmvTcx+160hLv58n1fjFiY8WpHrfT0HCQ2GQo34+XFj9/7XrmePzlo4ir6a8vQKjZH/Ic/GQrQrrILuxP5Q==} peerDependencies: react: ^18.2.0 || ^19.0.0 @@ -872,7 +872,7 @@ packages: '@emotion/weak-memoize': 0.3.1 '@floating-ui/react': 0.24.8(react-dom@19.1.0)(react@19.1.0) '@internationalized/string': 3.2.6 - '@keystar/ui': 0.7.19(next@15.3.2)(react-dom@19.1.0)(react@19.1.0) + '@keystar/ui': 0.7.19(next@15.3.8)(react-dom@19.1.0)(react@19.1.0) '@markdoc/markdoc': 0.4.0(@types/react@19.1.5)(react@19.1.0) '@react-aria/focus': 3.20.3(react-dom@19.1.0)(react@19.1.0) '@react-aria/i18n': 3.12.9(react-dom@19.1.0)(react@19.1.0) @@ -944,7 +944,7 @@ packages: - supports-color dev: false - /@keystatic/next@5.0.4(@keystatic/core@0.5.47)(next@15.3.2)(react-dom@19.1.0)(react@19.1.0): + /@keystatic/next@5.0.4(@keystatic/core@0.5.47)(next@15.3.8)(react-dom@19.1.0)(react@19.1.0): resolution: {integrity: sha512-48R0ZvjYZAyWyXQh/gTtV29Xs1f0BnB3/NBdTDHgcuWPNT5em9A5KMYsSNHDLhkKdbhlPAIV1T2/6JSzKsyBIA==} peerDependencies: '@keystatic/core': '*' @@ -953,10 +953,10 @@ packages: react-dom: ^18.2.0 || ^19.0.0 dependencies: '@babel/runtime': 7.27.1 - '@keystatic/core': 0.5.47(next@15.3.2)(react-dom@19.1.0)(react@19.1.0) + '@keystatic/core': 0.5.47(next@15.3.8)(react-dom@19.1.0)(react@19.1.0) '@types/react': 19.1.5 chokidar: 3.6.0 - next: 15.3.2(react-dom@19.1.0)(react@19.1.0) + next: 15.3.8(react-dom@19.1.0)(react@19.1.0) react: 19.1.0 react-dom: 19.1.0(react@19.1.0) server-only: 0.0.1 @@ -1009,8 +1009,8 @@ packages: dev: true optional: true - /@next/env@15.3.2: - resolution: {integrity: sha512-xURk++7P7qR9JG1jJtLzPzf0qEvqCN0A/T3DXf8IPMKo9/6FfjxtEffRJIIew/bIL4T3C2jLLqBor8B/zVlx6g==} + /@next/env@15.3.8: + resolution: {integrity: sha512-SAfHg0g91MQVMPioeFeDjE+8UPF3j3BvHjs8ZKJAUz1BG7eMPvfCKOAgNWJ6s1MLNeP6O2InKQRTNblxPWuq+Q==} dev: false /@next/eslint-plugin-next@15.3.2: @@ -1019,8 +1019,8 @@ packages: fast-glob: 3.3.1 dev: true - /@next/swc-darwin-arm64@15.3.2: - resolution: {integrity: sha512-2DR6kY/OGcokbnCsjHpNeQblqCZ85/1j6njYSkzRdpLn5At7OkSdmk7WyAmB9G0k25+VgqVZ/u356OSoQZ3z0g==} + /@next/swc-darwin-arm64@15.3.5: + resolution: {integrity: sha512-lM/8tilIsqBq+2nq9kbTW19vfwFve0NR7MxfkuSUbRSgXlMQoJYg+31+++XwKVSXk4uT23G2eF/7BRIKdn8t8w==} engines: {node: '>= 10'} cpu: [arm64] os: [darwin] @@ -1028,8 +1028,8 @@ packages: dev: false optional: true - /@next/swc-darwin-x64@15.3.2: - resolution: {integrity: sha512-ro/fdqaZWL6k1S/5CLv1I0DaZfDVJkWNaUU3un8Lg6m0YENWlDulmIWzV96Iou2wEYyEsZq51mwV8+XQXqMp3w==} + /@next/swc-darwin-x64@15.3.5: + resolution: {integrity: sha512-WhwegPQJ5IfoUNZUVsI9TRAlKpjGVK0tpJTL6KeiC4cux9774NYE9Wu/iCfIkL/5J8rPAkqZpG7n+EfiAfidXA==} engines: {node: '>= 10'} cpu: [x64] os: [darwin] @@ -1037,8 +1037,8 @@ packages: dev: false optional: true - /@next/swc-linux-arm64-gnu@15.3.2: - resolution: {integrity: sha512-covwwtZYhlbRWK2HlYX9835qXum4xYZ3E2Mra1mdQ+0ICGoMiw1+nVAn4d9Bo7R3JqSmK1grMq/va+0cdh7bJA==} + /@next/swc-linux-arm64-gnu@15.3.5: + resolution: {integrity: sha512-LVD6uMOZ7XePg3KWYdGuzuvVboxujGjbcuP2jsPAN3MnLdLoZUXKRc6ixxfs03RH7qBdEHCZjyLP/jBdCJVRJQ==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] @@ -1046,8 +1046,8 @@ packages: dev: false optional: true - /@next/swc-linux-arm64-musl@15.3.2: - resolution: {integrity: sha512-KQkMEillvlW5Qk5mtGA/3Yz0/tzpNlSw6/3/ttsV1lNtMuOHcGii3zVeXZyi4EJmmLDKYcTcByV2wVsOhDt/zg==} + /@next/swc-linux-arm64-musl@15.3.5: + resolution: {integrity: sha512-k8aVScYZ++BnS2P69ClK7v4nOu702jcF9AIHKu6llhHEtBSmM2zkPGl9yoqbSU/657IIIb0QHpdxEr0iW9z53A==} engines: {node: '>= 10'} cpu: [arm64] os: [linux] @@ -1055,8 +1055,8 @@ packages: dev: false optional: true - /@next/swc-linux-x64-gnu@15.3.2: - resolution: {integrity: sha512-uRBo6THWei0chz+Y5j37qzx+BtoDRFIkDzZjlpCItBRXyMPIg079eIkOCl3aqr2tkxL4HFyJ4GHDes7W8HuAUg==} + /@next/swc-linux-x64-gnu@15.3.5: + resolution: {integrity: sha512-2xYU0DI9DGN/bAHzVwADid22ba5d/xrbrQlr2U+/Q5WkFUzeL0TDR963BdrtLS/4bMmKZGptLeg6282H/S2i8A==} engines: {node: '>= 10'} cpu: [x64] os: [linux] @@ -1064,8 +1064,8 @@ packages: dev: false optional: true - /@next/swc-linux-x64-musl@15.3.2: - resolution: {integrity: sha512-+uxFlPuCNx/T9PdMClOqeE8USKzj8tVz37KflT3Kdbx/LOlZBRI2yxuIcmx1mPNK8DwSOMNCr4ureSet7eyC0w==} + /@next/swc-linux-x64-musl@15.3.5: + resolution: {integrity: sha512-TRYIqAGf1KCbuAB0gjhdn5Ytd8fV+wJSM2Nh2is/xEqR8PZHxfQuaiNhoF50XfY90sNpaRMaGhF6E+qjV1b9Tg==} engines: {node: '>= 10'} cpu: [x64] os: [linux] @@ -1073,8 +1073,8 @@ packages: dev: false optional: true - /@next/swc-win32-arm64-msvc@15.3.2: - resolution: {integrity: sha512-LLTKmaI5cfD8dVzh5Vt7+OMo+AIOClEdIU/TSKbXXT2iScUTSxOGoBhfuv+FU8R9MLmrkIL1e2fBMkEEjYAtPQ==} + /@next/swc-win32-arm64-msvc@15.3.5: + resolution: {integrity: sha512-h04/7iMEUSMY6fDGCvdanKqlO1qYvzNxntZlCzfE8i5P0uqzVQWQquU1TIhlz0VqGQGXLrFDuTJVONpqGqjGKQ==} engines: {node: '>= 10'} cpu: [arm64] os: [win32] @@ -1082,8 +1082,8 @@ packages: dev: false optional: true - /@next/swc-win32-x64-msvc@15.3.2: - resolution: {integrity: sha512-aW5B8wOPioJ4mBdMDXkt5f3j8pUr9W8AnlX0Df35uRWNT1Y6RIybxjnSUe+PhM+M1bwgyY8PHLmXZC6zT1o5tA==} + /@next/swc-win32-x64-msvc@15.3.5: + resolution: {integrity: sha512-5fhH6fccXxnX2KhllnGhkYMndhOiLOLEiVGYjP2nizqeGWkN10sA9taATlXwake2E2XMvYZjjz0Uj7T0y+z1yw==} engines: {node: '>= 10'} cpu: [x64] os: [win32] @@ -5478,8 +5478,8 @@ packages: react-dom: 19.1.0(react@19.1.0) dev: false - /next@15.3.2(react-dom@19.1.0)(react@19.1.0): - resolution: {integrity: sha512-CA3BatMyHkxZ48sgOCLdVHjFU36N7TF1HhqAHLFOkV6buwZnvMI84Cug8xD56B9mCuKrqXnLn94417GrZ/jjCQ==} + /next@15.3.8(react-dom@19.1.0)(react@19.1.0): + resolution: {integrity: sha512-L+4c5Hlr84fuaNADZbB9+ceRX9/CzwxJ+obXIGHupboB/Q1OLbSUapFs4bO8hnS/E6zV/JDX7sG1QpKVR2bguA==} engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0} hasBin: true peerDependencies: @@ -5499,7 +5499,7 @@ packages: sass: optional: true dependencies: - '@next/env': 15.3.2 + '@next/env': 15.3.8 '@swc/counter': 0.1.3 '@swc/helpers': 0.5.15 busboy: 1.6.0 @@ -5509,14 +5509,14 @@ packages: react-dom: 19.1.0(react@19.1.0) styled-jsx: 5.1.6(react@19.1.0) optionalDependencies: - '@next/swc-darwin-arm64': 15.3.2 - '@next/swc-darwin-x64': 15.3.2 - '@next/swc-linux-arm64-gnu': 15.3.2 - '@next/swc-linux-arm64-musl': 15.3.2 - '@next/swc-linux-x64-gnu': 15.3.2 - '@next/swc-linux-x64-musl': 15.3.2 - '@next/swc-win32-arm64-msvc': 15.3.2 - '@next/swc-win32-x64-msvc': 15.3.2 + '@next/swc-darwin-arm64': 15.3.5 + '@next/swc-darwin-x64': 15.3.5 + '@next/swc-linux-arm64-gnu': 15.3.5 + '@next/swc-linux-arm64-musl': 15.3.5 + '@next/swc-linux-x64-gnu': 15.3.5 + '@next/swc-linux-x64-musl': 15.3.5 + '@next/swc-win32-arm64-msvc': 15.3.5 + '@next/swc-win32-x64-msvc': 15.3.5 sharp: 0.34.2 transitivePeerDependencies: - '@babel/core'