Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Vercel committed
Dec 12, 2025 at 16:51 UTC
aaec5fa93aeb04bb24adcc5cf7e04b25fd2dc5c3
2 files changed
+75
-74
package.json
+13
-13
@@ -1,15 +1,15 @@
1
{
2
- "scripts": {
3
- "dev": "next",
4
- "build": "next build",
5
- "start": "next start",
6
- "start-smbclouddocs": "next start -p 3019"
7
- },
8
- "dependencies": {
9
- "next": "^15.0.3",
10
- "react": "^18.3.1",
11
- "react-dom": "^18.3.1",
12
- "nextra": "^3.2.4",
13
- "nextra-theme-docs": "^3.2.4"
14
- }
2
+ "scripts": {
3
+ "dev": "next",
4
+ "build": "next build",
5
+ "start": "next start",
6
+ "start-smbclouddocs": "next start -p 3019"
7
+ },
8
+ "dependencies": {
9
+ "next": "15.0.7",
10
+ "react": "^18.3.1",
11
+ "react-dom": "^18.3.1",
12
+ "nextra": "^3.2.4",
13
+ "nextra-theme-docs": "^3.2.4"
14
+ }
15
}
pnpm-lock.yaml
+62
-61
@@ -9,14 +9,14 @@ importers:
9
.:
10
dependencies:
11
next:
12
- specifier: ^15.0.3
13
- version: 15.0.3(react-dom@18.3.1)(react@18.3.1)
12
+ specifier: 15.0.7
13
+ version: 15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
14
nextra:
15
specifier: ^3.2.4
16
- version: 3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.3)(react-dom@18.3.1)(react@18.3.1)(typescript@5.7.2)
16
+ version: 3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@5.7.2)
17
nextra-theme-docs:
18
specifier: ^3.2.4
19
- version: 3.2.4(next@15.0.3)(nextra@3.2.4)(react-dom@18.3.1)(react@18.3.1)
19
+ version: 3.2.4(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(nextra@3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@5.7.2))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
20
react:
21
specifier: ^18.3.1
22
version: 18.3.1
@@ -295,53 +295,53 @@ packages:
295
resolution: {integrity: sha512-jMxvwzkKzd3cXo2EB9GM2ic0eYo2rP/BS6gJt6HnWbsDO1O8GSD4k7o2Cpr2YERtMpGF/MGcDfsfj2EbQPtrXw==}
296
engines: {node: '>= 10'}
297
298
- '@next/env@15.0.3':
299
- resolution: {integrity: sha512-t9Xy32pjNOvVn2AS+Utt6VmyrshbpfUMhIjFO60gI58deSo/KgLOp31XZ4O+kY/Is8WAGYwA5gR7kOb1eORDBA==}
298
+ '@next/env@15.0.7':
299
+ resolution: {integrity: sha512-g/v9G2Xmv9T6w/DcRdcdVkLuAHnGt5fcJ3C33PmPrrdtUrwrjXcT4jXasdedSbw+koXa4YeEA3nPgy6q2wmk2A==}
300
301
- '@next/swc-darwin-arm64@15.0.3':
302
- resolution: {integrity: sha512-s3Q/NOorCsLYdCKvQlWU+a+GeAd3C8Rb3L1YnetsgwXzhc3UTWrtQpB/3eCjFOdGUj5QmXfRak12uocd1ZiiQw==}
301
+ '@next/swc-darwin-arm64@15.0.5':
302
+ resolution: {integrity: sha512-BrNm/9BZoV6QEFKFZdgZRyYwhdhxV8GhW+U4D5cdkT4Wefj7YflAUZNx2FWyBPp7utBPCgJXnVbVLhlDoIfKFg==}
303
engines: {node: '>= 10'}
304
cpu: [arm64]
305
os: [darwin]
306
307
- '@next/swc-darwin-x64@15.0.3':
308
- resolution: {integrity: sha512-Zxl/TwyXVZPCFSf0u2BNj5sE0F2uR6iSKxWpq4Wlk/Sv9Ob6YCKByQTkV2y6BCic+fkabp9190hyrDdPA/dNrw==}
307
+ '@next/swc-darwin-x64@15.0.5':
308
+ resolution: {integrity: sha512-SkpRdqyJLhmU6Ip0dHrZ5mLMQgTU0MlTASRwqCj6NXQJ04eS4QzBgEUUOPX+tsUOQ+KSVMgX/iQaWgQHNMyyCQ==}
309
engines: {node: '>= 10'}
310
cpu: [x64]
311
os: [darwin]
312
313
- '@next/swc-linux-arm64-gnu@15.0.3':
314
- resolution: {integrity: sha512-T5+gg2EwpsY3OoaLxUIofmMb7ohAUlcNZW0fPQ6YAutaWJaxt1Z1h+8zdl4FRIOr5ABAAhXtBcpkZNwUcKI2fw==}
313
+ '@next/swc-linux-arm64-gnu@15.0.5':
314
+ resolution: {integrity: sha512-nk+6BAIkIHTeQg+U1uqGpZ8K1KSAbhq80EkSgpgPC6wBmRkEeBitn4yL9C0fUiEPeZ3zN4yrvI635GG/H2QmSQ==}
315
engines: {node: '>= 10'}
316
cpu: [arm64]
317
os: [linux]
318
319
- '@next/swc-linux-arm64-musl@15.0.3':
320
- resolution: {integrity: sha512-WkAk6R60mwDjH4lG/JBpb2xHl2/0Vj0ZRu1TIzWuOYfQ9tt9NFsIinI1Epma77JVgy81F32X/AeD+B2cBu/YQA==}
319
+ '@next/swc-linux-arm64-musl@15.0.5':
320
+ resolution: {integrity: sha512-CozywhydLroNNz1AMKdKKVBuRc0UIBG7TlVgXXn51MdZo4sMbfApOlQFUyuAbKJbe67vd39Yib2lVVVDfLTtfw==}
321
engines: {node: '>= 10'}
322
cpu: [arm64]
323
os: [linux]
324
325
- '@next/swc-linux-x64-gnu@15.0.3':
326
- resolution: {integrity: sha512-gWL/Cta1aPVqIGgDb6nxkqy06DkwJ9gAnKORdHWX1QBbSZZB+biFYPFti8aKIQL7otCE1pjyPaXpFzGeG2OS2w==}
325
+ '@next/swc-linux-x64-gnu@15.0.5':
326
+ resolution: {integrity: sha512-VWfvl8toyC/5Rn1GgKfiASYgssCsxz4GtwK2cFKmmnyGfoKubFc6DfCI5MzBoe2Q2gzd2CeZDoT1BhuutSiL7A==}
327
engines: {node: '>= 10'}
328
cpu: [x64]
329
os: [linux]
330
331
- '@next/swc-linux-x64-musl@15.0.3':
332
- resolution: {integrity: sha512-QQEMwFd8r7C0GxQS62Zcdy6GKx999I/rTO2ubdXEe+MlZk9ZiinsrjwoiBL5/57tfyjikgh6GOU2WRQVUej3UA==}
331
+ '@next/swc-linux-x64-musl@15.0.5':
332
+ resolution: {integrity: sha512-xCD/V4Z55eFtG2SNyXgG3ciIikcxNe4FgmgcW4xTaEcLY59ZJVLxx4PLve2vDgp7xqvwDD4vvUsJuFMuQ12oGg==}
333
engines: {node: '>= 10'}
334
cpu: [x64]
335
os: [linux]
336
337
- '@next/swc-win32-arm64-msvc@15.0.3':
338
- resolution: {integrity: sha512-9TEp47AAd/ms9fPNgtgnT7F3M1Hf7koIYYWCMQ9neOwjbVWJsHZxrFbI3iEDJ8rf1TDGpmHbKxXf2IFpAvheIQ==}
337
+ '@next/swc-win32-arm64-msvc@15.0.5':
338
+ resolution: {integrity: sha512-OmKXP/mUzY+AiDFk9PR3RoM6YfgzNYhtSbfvTUDk3PxoCLKnwTZ8xsFoWX2ph/RFC25QucTeAFepouGGsdBPAg==}
339
engines: {node: '>= 10'}
340
cpu: [arm64]
341
os: [win32]
342
343
- '@next/swc-win32-x64-msvc@15.0.3':
344
- resolution: {integrity: sha512-VNAz+HN4OGgvZs6MOoVfnn41kBzT+M+tB+OK4cww6DNyWS6wKaDpaAm/qLeOUbnMh0oVx1+mg0uoYARF69dJyA==}
343
+ '@next/swc-win32-x64-msvc@15.0.5':
344
+ resolution: {integrity: sha512-O34P9asvZtdNQ+4sEczSLruYvM7XEQKY/FCwRAeQQnrWW3tol3VEuv2GtnFb1YHsP3lZtagd11UYJqrs0Y0r2A==}
345
engines: {node: '>= 10'}
346
cpu: [x64]
347
os: [win32]
@@ -1161,6 +1161,7 @@ packages:
1161
1162
mathjax-full@3.2.2:
1163
resolution: {integrity: sha512-+LfG9Fik+OuI8SLwsiR02IVdjcnRCy5MufYLi0C3TdMT56L/pjB0alMVGgoWJF8pN9Rc7FESycZB9BMNWIid5w==}
1164
+ deprecated: Version 4 replaces this package with the scoped package @mathjax/src
1165
1166
mdast-util-find-and-replace@3.0.1:
1167
resolution: {integrity: sha512-SG21kZHGC3XRTSUhtofZkBzZTJNM5ecCi0SK2IMKmSXR8vO3peL+kb1O0z7Zl83jKtutG4k5Wv/W7V3/YHvzPA==}
@@ -1364,16 +1365,16 @@ packages:
1365
react: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
1366
react-dom: ^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc
1367
1367
- next@15.0.3:
1368
- resolution: {integrity: sha512-ontCbCRKJUIoivAdGB34yCaOcPgYXr9AAkV/IwqFfWWTXEPUgLYkSkqBhIk9KK7gGmgjc64B+RdoeIDM13Irnw==}
1368
+ next@15.0.7:
1369
+ resolution: {integrity: sha512-Vl6fLEuOP1MgtEmDrY51BQr6Bl8oC8vDSHdA10xZWPPZa6e+dOwYNDLWHjvTktNLZkKYySpsW3Yzy4Lo+JORkw==}
1370
engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
1371
hasBin: true
1372
peerDependencies:
1373
'@opentelemetry/api': ^1.1.0
1374
'@playwright/test': ^1.41.2
1375
babel-plugin-react-compiler: '*'
1375
- react: ^18.2.0 || 19.0.0-rc-66855b96-20241106
1376
- react-dom: ^18.2.0 || 19.0.0-rc-66855b96-20241106
1376
+ react: ^18.2.0 || 19.0.0-rc-66855b96-20241106 || ^19.0.0
1377
+ react-dom: ^18.2.0 || 19.0.0-rc-66855b96-20241106 || ^19.0.0
1378
sass: ^1.3.0
1379
peerDependenciesMeta:
1380
'@opentelemetry/api':
@@ -1869,15 +1870,15 @@ snapshots:
1870
'@floating-ui/core': 1.6.8
1871
'@floating-ui/utils': 0.2.8
1872
1872
- '@floating-ui/react-dom@2.1.2(react-dom@18.3.1)(react@18.3.1)':
1873
+ '@floating-ui/react-dom@2.1.2(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
1874
dependencies:
1875
'@floating-ui/dom': 1.6.12
1876
react: 18.3.1
1877
react-dom: 18.3.1(react@18.3.1)
1878
1878
- '@floating-ui/react@0.26.28(react-dom@18.3.1)(react@18.3.1)':
1879
+ '@floating-ui/react@0.26.28(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
1880
dependencies:
1880
- '@floating-ui/react-dom': 2.1.2(react-dom@18.3.1)(react@18.3.1)
1881
+ '@floating-ui/react-dom': 2.1.2(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
1882
'@floating-ui/utils': 0.2.8
1883
react: 18.3.1
1884
react-dom: 18.3.1(react@18.3.1)
@@ -1889,12 +1890,12 @@ snapshots:
1890
dependencies:
1891
tslib: 2.8.1
1892
1892
- '@headlessui/react@2.2.0(react-dom@18.3.1)(react@18.3.1)':
1893
+ '@headlessui/react@2.2.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
1894
dependencies:
1894
- '@floating-ui/react': 0.26.28(react-dom@18.3.1)(react@18.3.1)
1895
+ '@floating-ui/react': 0.26.28(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
1896
'@react-aria/focus': 3.19.0(react@18.3.1)
1897
'@react-aria/interactions': 3.22.5(react@18.3.1)
1897
- '@tanstack/react-virtual': 3.10.9(react-dom@18.3.1)(react@18.3.1)
1898
+ '@tanstack/react-virtual': 3.10.9(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
1899
react: 18.3.1
1900
react-dom: 18.3.1(react@18.3.1)
1901
@@ -2086,30 +2087,30 @@ snapshots:
2087
'@napi-rs/simple-git-win32-arm64-msvc': 0.1.19
2088
'@napi-rs/simple-git-win32-x64-msvc': 0.1.19
2089
2089
- '@next/env@15.0.3': {}
2090
+ '@next/env@15.0.7': {}
2091
2091
- '@next/swc-darwin-arm64@15.0.3':
2092
+ '@next/swc-darwin-arm64@15.0.5':
2093
optional: true
2094
2094
- '@next/swc-darwin-x64@15.0.3':
2095
+ '@next/swc-darwin-x64@15.0.5':
2096
optional: true
2097
2097
- '@next/swc-linux-arm64-gnu@15.0.3':
2098
+ '@next/swc-linux-arm64-gnu@15.0.5':
2099
optional: true
2100
2100
- '@next/swc-linux-arm64-musl@15.0.3':
2101
+ '@next/swc-linux-arm64-musl@15.0.5':
2102
optional: true
2103
2103
- '@next/swc-linux-x64-gnu@15.0.3':
2104
+ '@next/swc-linux-x64-gnu@15.0.5':
2105
optional: true
2106
2106
- '@next/swc-linux-x64-musl@15.0.3':
2107
+ '@next/swc-linux-x64-musl@15.0.5':
2108
optional: true
2109
2109
- '@next/swc-win32-arm64-msvc@15.0.3':
2110
+ '@next/swc-win32-arm64-msvc@15.0.5':
2111
optional: true
2112
2112
- '@next/swc-win32-x64-msvc@15.0.3':
2113
+ '@next/swc-win32-x64-msvc@15.0.5':
2114
optional: true
2115
2116
'@react-aria/focus@3.19.0(react@18.3.1)':
@@ -2198,7 +2199,7 @@ snapshots:
2199
dependencies:
2200
tslib: 2.8.1
2201
2201
- '@tanstack/react-virtual@3.10.9(react-dom@18.3.1)(react@18.3.1)':
2202
+ '@tanstack/react-virtual@3.10.9(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
2203
dependencies:
2204
'@tanstack/virtual-core': 3.10.9
2205
react: 18.3.1
@@ -3596,14 +3597,14 @@ snapshots:
3597
3598
negotiator@1.0.0: {}
3599
3599
- next-themes@0.4.3(react-dom@18.3.1)(react@18.3.1):
3600
+ next-themes@0.4.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
3601
dependencies:
3602
react: 18.3.1
3603
react-dom: 18.3.1(react@18.3.1)
3604
3604
- next@15.0.3(react-dom@18.3.1)(react@18.3.1):
3605
+ next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
3606
dependencies:
3606
- '@next/env': 15.0.3
3607
+ '@next/env': 15.0.7
3608
'@swc/counter': 0.1.3
3609
'@swc/helpers': 0.5.13
3610
busboy: 1.6.0
@@ -3613,37 +3614,37 @@ snapshots:
3614
react-dom: 18.3.1(react@18.3.1)
3615
styled-jsx: 5.1.6(react@18.3.1)
3616
optionalDependencies:
3616
- '@next/swc-darwin-arm64': 15.0.3
3617
- '@next/swc-darwin-x64': 15.0.3
3618
- '@next/swc-linux-arm64-gnu': 15.0.3
3619
- '@next/swc-linux-arm64-musl': 15.0.3
3620
- '@next/swc-linux-x64-gnu': 15.0.3
3621
- '@next/swc-linux-x64-musl': 15.0.3
3622
- '@next/swc-win32-arm64-msvc': 15.0.3
3623
- '@next/swc-win32-x64-msvc': 15.0.3
3617
+ '@next/swc-darwin-arm64': 15.0.5
3618
+ '@next/swc-darwin-x64': 15.0.5
3619
+ '@next/swc-linux-arm64-gnu': 15.0.5
3620
+ '@next/swc-linux-arm64-musl': 15.0.5
3621
+ '@next/swc-linux-x64-gnu': 15.0.5
3622
+ '@next/swc-linux-x64-musl': 15.0.5
3623
+ '@next/swc-win32-arm64-msvc': 15.0.5
3624
+ '@next/swc-win32-x64-msvc': 15.0.5
3625
sharp: 0.33.5
3626
transitivePeerDependencies:
3627
- '@babel/core'
3628
- babel-plugin-macros
3629
3629
- nextra-theme-docs@3.2.4(next@15.0.3)(nextra@3.2.4)(react-dom@18.3.1)(react@18.3.1):
3630
+ nextra-theme-docs@3.2.4(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(nextra@3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@5.7.2))(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
3631
dependencies:
3631
- '@headlessui/react': 2.2.0(react-dom@18.3.1)(react@18.3.1)
3632
+ '@headlessui/react': 2.2.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
3633
clsx: 2.1.1
3634
escape-string-regexp: 5.0.0
3635
flexsearch: 0.7.43
3635
- next: 15.0.3(react-dom@18.3.1)(react@18.3.1)
3636
- next-themes: 0.4.3(react-dom@18.3.1)(react@18.3.1)
3637
- nextra: 3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.3)(react-dom@18.3.1)(react@18.3.1)(typescript@5.7.2)
3636
+ next: 15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
3637
+ next-themes: 0.4.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
3638
+ nextra: 3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@5.7.2)
3639
react: 18.3.1
3640
react-dom: 18.3.1(react@18.3.1)
3641
scroll-into-view-if-needed: 3.1.0
3642
zod: 3.23.8
3643
3643
- nextra@3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.3)(react-dom@18.3.1)(react@18.3.1)(typescript@5.7.2):
3644
+ nextra@3.2.4(@types/react@18.3.12)(acorn@8.14.0)(next@15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(typescript@5.7.2):
3645
dependencies:
3646
'@formatjs/intl-localematcher': 0.5.8
3646
- '@headlessui/react': 2.2.0(react-dom@18.3.1)(react@18.3.1)
3647
+ '@headlessui/react': 2.2.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
3648
'@mdx-js/mdx': 3.1.0(acorn@8.14.0)
3649
'@mdx-js/react': 3.1.0(@types/react@18.3.12)(react@18.3.1)
3650
'@napi-rs/simple-git': 0.1.19
@@ -3663,7 +3664,7 @@ snapshots:
3664
mdast-util-gfm: 3.0.0
3665
mdast-util-to-hast: 13.2.0
3666
negotiator: 1.0.0
3666
- next: 15.0.3(react-dom@18.3.1)(react@18.3.1)
3667
+ next: 15.0.7(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
3668
p-limit: 6.1.0
3669
react: 18.3.1
3670
react-dom: 18.3.1(react@18.3.1)