Merge branch 'fix/e-CVE-2026-23864' into deploy/enterprise

Author: douxc

web/package.json

@@ -107,15 +107,15 @@
     "mime": "^4.1.0",
     "mitt": "^3.0.1",
     "negotiator": "^1.0.0",
-    "next": "~15.5.9",
+    "next": "~15.5.10",
     "next-themes": "^0.4.6",
     "nuqs": "^2.8.6",
     "pinyin-pro": "^3.27.0",
     "qrcode.react": "^4.2.0",
     "qs": "^6.14.1",
-    "react": "19.2.3",
+    "react": "19.2.4",
     "react-18-input-autosize": "^3.0.0",
-    "react-dom": "19.2.3",
+    "react-dom": "19.2.4",
     "react-easy-crop": "^5.5.3",
     "react-hotkeys-hook": "^4.6.2",
     "react-i18next": "^16.5.0",
@@ -153,9 +153,9 @@
     "@eslint-react/eslint-plugin": "^2.3.13",
     "@mdx-js/loader": "^3.1.1",
     "@mdx-js/react": "^3.1.1",
-    "@next/bundle-analyzer": "15.5.9",
-    "@next/eslint-plugin-next": "15.5.9",
-    "@next/mdx": "15.5.9",
+    "@next/bundle-analyzer": "15.5.10",
+    "@next/eslint-plugin-next": "15.5.10",
+    "@next/mdx": "15.5.10",
     "@rgrove/parse-xml": "^4.2.0",
     "@serwist/turbopack": "^9.5.0",
     "@storybook/addon-docs": "9.1.13",
@@ -177,8 +177,8 @@
     "@types/negotiator": "^0.6.4",
     "@types/node": "18.15.0",
     "@types/qs": "^6.14.0",
-    "@types/react": "~19.2.7",
-    "@types/react-dom": "~19.2.3",
+    "@types/react": "~19.2.9",
+    "@types/react-dom": "19.2.3",
     "@types/react-slider": "^1.3.6",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@types/react-window": "^1.8.8",