Skip to content

Fix React Server Components CVE vulnerabilities - #356

Merged
kasin-it merged 1 commit into
Blazity:mainfrom
malewis5:fix/cve-2025-66478
Dec 15, 2025
Merged

Fix React Server Components CVE vulnerabilities#356
kasin-it merged 1 commit into
Blazity:mainfrom
malewis5:fix/cve-2025-66478

Conversation

@malewis5

Copy link
Copy Markdown
Contributor

This PR upgrades dependencies to patch a security vulnerability.

Action required

Please review the changes and run a quick test. If everything looks correct, you can merge this PR. If you prefer to upgrade manually, feel free to close this and apply your own fix.

Thank you.

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.
@vercel

vercel Bot commented Dec 12, 2025

Copy link
Copy Markdown

@malewis5 is attempting to deploy a commit to the Blazity Team on Vercel.

A member of the Team first needs to authorize it.

@vercel

vercel Bot commented Dec 15, 2025

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
next-enterprise Ready Ready Preview, Comment Dec 15, 2025 10:01am

@kasin-it
kasin-it marked this pull request as ready for review December 15, 2025 10:12
@kasin-it
kasin-it merged commit c16deae into Blazity:main Dec 15, 2025
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants