Compare commits

..

1 Commits

Author SHA1 Message Date
Vercel
2c82e8d859 Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-12 17:42:43 +00:00
3 changed files with 498 additions and 530 deletions

View File

@ -16,7 +16,7 @@ jobs:
- name: Use Node.js 22
uses: actions/setup-node@v4
with:
node-version: 24
node-version: 22
cache: 'pnpm'
- name: Install dependencies

View File

@ -14,12 +14,12 @@
},
"dependencies": {
"@datadog/browser-logs": "^5.23.3",
"@livekit/components-react": "2.9.19",
"@livekit/components-react": "2.9.16",
"@livekit/components-styles": "1.2.0",
"@livekit/krisp-noise-filter": "0.4.1",
"@livekit/track-processors": "^0.7.0",
"livekit-client": "2.17.2",
"livekit-server-sdk": "2.15.0",
"@livekit/krisp-noise-filter": "0.3.4",
"@livekit/track-processors": "^0.6.0",
"livekit-client": "2.16.0",
"livekit-server-sdk": "2.14.2",
"next": "15.2.8",
"react": "18.3.1",
"react-dom": "18.3.1",
@ -27,7 +27,7 @@
"tinykeys": "^3.0.0"
},
"devDependencies": {
"@types/node": "24.10.13",
"@types/node": "22.19.1",
"@types/react": "18.3.27",
"@types/react-dom": "18.3.7",
"eslint": "9.39.1",

1014
pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff