From 223f90c111c9e71ac29f662bbda5c96f2e375519 Mon Sep 17 00:00:00 2001 From: Vercel Date: Thu, 11 Dec 2025 00:15:03 +0000 Subject: Update Next.js/React Flight RCE vulnerability patches Updated dependencies to fix Next.js CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- middleware/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'middleware/package.json') diff --git a/middleware/package.json b/middleware/package.json index b54eb7a..cf4f007 100644 --- a/middleware/package.json +++ b/middleware/package.json @@ -20,7 +20,7 @@ "eslint": "9.30.0", "eslint-config-next": "15.3.4", "global": "^4.4.0", - "next": "^15.3.4", + "next": "15.3.6", "postcss": "^8.5.6", "react": "19.1.0", "react-dom": "19.1.0", -- cgit v1.2.3