Skip to content

Commit 1b21cc3

Browse files
PatrickAlphaCclaude
andcommitted
chore(deps): bump next to 15.5.19 for security patches
15.5.9 was behind on patch releases. 15.5.19 clears all 18 open GitHub advisories for next (DoS, middleware/proxy bypass, SSRF CVE-2026-44578, XSS, cache poisoning). None were exploitable in this static export (output: "export" has no server runtime), and the React Server Components RCE (CVE-2025-66478) was already fixed in 15.5.7 — but staying on the latest 15.5.x patch removes the exposure entirely. eslint-config-next aligned to 15.5.19 to match next. Verified: production build, eslint (121 files, 0/0), pnpm audit reports 0 next advisories. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent bfa12e2 commit 1b21cc3

2 files changed

Lines changed: 69 additions & 90 deletions

File tree

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
"@walletconnect/core": "^2.23.9",
3131
"@walletconnect/types": "^2.23.9",
3232
"ethers": "^6.16.0",
33-
"next": "15.5.9",
33+
"next": "15.5.19",
3434
"react": "19.2.7",
3535
"react-dom": "19.2.7",
3636
"react-router-dom": "^7.17.0",
@@ -47,7 +47,7 @@
4747
"@wonderland/walletless": "^1.2.0",
4848
"daisyui": "^5.5.23",
4949
"eslint": "^9",
50-
"eslint-config-next": "15.5.9",
50+
"eslint-config-next": "15.5.19",
5151
"eslint-config-prettier": "^10.1.8",
5252
"playwright-core": "1.60.0",
5353
"prettier": "^3.8.4",

0 commit comments

Comments
 (0)