Compare commits

..

1 Commits

Author SHA1 Message Date
Vercel
2c82e8d859 Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-12 17:42:43 +00:00
3 changed files with 498 additions and 530 deletions

View File

@ -16,7 +16,7 @@ jobs:
- name: Use Node.js 22 - name: Use Node.js 22
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: 24 node-version: 22
cache: 'pnpm' cache: 'pnpm'
- name: Install dependencies - name: Install dependencies

View File

@ -14,12 +14,12 @@
}, },
"dependencies": { "dependencies": {
"@datadog/browser-logs": "^5.23.3", "@datadog/browser-logs": "^5.23.3",
"@livekit/components-react": "2.9.19", "@livekit/components-react": "2.9.16",
"@livekit/components-styles": "1.2.0", "@livekit/components-styles": "1.2.0",
"@livekit/krisp-noise-filter": "0.4.1", "@livekit/krisp-noise-filter": "0.3.4",
"@livekit/track-processors": "^0.7.0", "@livekit/track-processors": "^0.6.0",
"livekit-client": "2.17.2", "livekit-client": "2.16.0",
"livekit-server-sdk": "2.15.0", "livekit-server-sdk": "2.14.2",
"next": "15.2.8", "next": "15.2.8",
"react": "18.3.1", "react": "18.3.1",
"react-dom": "18.3.1", "react-dom": "18.3.1",
@ -27,7 +27,7 @@
"tinykeys": "^3.0.0" "tinykeys": "^3.0.0"
}, },
"devDependencies": { "devDependencies": {
"@types/node": "24.10.13", "@types/node": "22.19.1",
"@types/react": "18.3.27", "@types/react": "18.3.27",
"@types/react-dom": "18.3.7", "@types/react-dom": "18.3.7",
"eslint": "9.39.1", "eslint": "9.39.1",

1014
pnpm-lock.yaml generated

File diff suppressed because it is too large Load Diff