From f4f8a8eedf3dbf38b772f52b58b0d079ce0bce3f Mon Sep 17 00:00:00 2001 From: Vercel Date: Wed, 17 Dec 2025 10:39:07 +0000 Subject: [PATCH] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- my-3d-app/package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/my-3d-app/package.json b/my-3d-app/package.json index 14ae1f9..41a1a3e 100644 --- a/my-3d-app/package.json +++ b/my-3d-app/package.json @@ -11,7 +11,7 @@ "dependencies": { "react": "19.0.0-rc-02c0e824-20241028", "react-dom": "19.0.0-rc-02c0e824-20241028", - "next": "15.0.2" + "next": "15.0.7" }, "devDependencies": { "typescript": "^5", @@ -23,4 +23,4 @@ "eslint": "^8", "eslint-config-next": "15.0.2" } -} +}