-
Notifications
You must be signed in to change notification settings - Fork 2.7k
Address react and next CVEs #8179
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
konstantin-msft
commented
Dec 4, 2025
- Address react and next CVEs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR updates React and Next.js dependencies across sample applications and the msal-react library to address security vulnerabilities (CVEs). The changes update React from 19.1.0 to 19.1.2 and Next.js from 15.4.7 to 15.4.8.
Key Changes:
- React and react-dom updated from
^19.1.0to^19.1.2across all React samples and msal-react devDependencies - Next.js updated from
^15.4.7to^15.4.8in the Next.js sample - msal-react peer dependency updated to specify
^19.1.2(note: this change has implications)
Reviewed changes
Copilot reviewed 7 out of 8 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| samples/msal-react-samples/typescript-sample/package.json | Updates React dependencies to address CVEs |
| samples/msal-react-samples/react-router-sample/package.json | Updates React dependencies to address CVEs |
| samples/msal-react-samples/nextjs-sample/package.json | Updates React and Next.js dependencies to address CVEs |
| samples/msal-react-samples/b2c-sample/package.json | Updates React dependencies to address CVEs |
| samples/msal-node-samples/ElectronSystemBrowserTestApp/package.json | Updates React dependencies to address CVEs |
| lib/msal-react/package.json | Updates React devDependencies and peer dependency constraint |
| package-lock.json | Lockfile updates reflecting dependency version changes |
Co-authored-by: Copilot <[email protected]>
Co-authored-by: Copilot <[email protected]>
16d0660