Critical Vulnerability CVE-2025-29927 in next@15.2.2

[GettingOutTheNopSled]

App Version

3.18.0

API Provider

Not Applicable / Other

Model Used

N/A

🔁 Steps to Reproduce

The next version being used in web (evals>apps>web) has a critical vulnerability that is fixed in 15.2.3. Remediating this with that small version bump should be quick and pose no issues with functionality as I believe that version bump was just to fix the vulnerability.

Roo-Code/evals/apps/web/package.json

Line 35 in 8a8fadd

"next": "15.2.2",

💥 Outcome Summary (Optional)

No response

📄 Relevant Logs or Errors

[GettingOutTheNopSled]

I updated it myself in a branch but am not a contributor, so I don't believe I can publish my branch and create a draft PR!

[daniel-lxs]

Fixed on #4166