Skip to content

Commit b72db8b

Browse files
vercel[bot]vercel[bot]
authored
Fix React Server Components CVE vulnerabilities (#23)
Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
1 parent 84e30d7 commit b72db8b

File tree

5 files changed

+186
-164
lines changed

5 files changed

+186
-164
lines changed

‎examples/demo/package.json‎

Lines changed: 38 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,39 @@
11
{
2-
"name": "react-zero",
3-
"version": "0.1.0",
4-
"private": true,
5-
"type": "module",
6-
"scripts": {
7-
"dev": "next dev",
8-
"prebuild": "zero-icons",
9-
"build": "next build",
10-
"start": "next start",
11-
"lint": "next lint",
12-
"lint:fix": "next lint --fix",
13-
"format": "prettier --write .",
14-
"format:check": "prettier --check .",
15-
"type-check": "tsc --noEmit",
16-
"clean": "rm -rf .next"
17-
},
18-
"dependencies": {
19-
"@codesandbox/sandpack-react": "^2.20.0",
20-
"@react-zero-ui/core": "^0.3.3",
21-
"@react-zero-ui/icon-sprite": "^0.1.4",
22-
"@vercel/analytics": "^1.5.0",
23-
"clsx": "^2.1.1",
24-
"motion": "12.18.1",
25-
"next": "^15.3.5",
26-
"react": "^19.0.0",
27-
"react-dom": "^19.0.0",
28-
"react-scan": "^0.4.3"
29-
},
30-
"devDependencies": {
31-
"@tailwindcss/postcss": "^4.1.10",
32-
"@types/node": "^20",
33-
"@types/react": "^19",
34-
"@types/react-dom": "^19",
35-
"postcss": "^8.5.5",
36-
"tailwindcss": "^4.1.10",
37-
"typescript": "^5"
38-
}
39-
}
2+
"name": "react-zero",
3+
"version": "0.1.0",
4+
"private": true,
5+
"type": "module",
6+
"scripts": {
7+
"dev": "next dev",
8+
"prebuild": "zero-icons",
9+
"build": "next build",
10+
"start": "next start",
11+
"lint": "next lint",
12+
"lint:fix": "next lint --fix",
13+
"format": "prettier --write .",
14+
"format:check": "prettier --check .",
15+
"type-check": "tsc --noEmit",
16+
"clean": "rm -rf .next"
17+
},
18+
"dependencies": {
19+
"@codesandbox/sandpack-react": "^2.20.0",
20+
"@react-zero-ui/core": "^0.3.3",
21+
"@react-zero-ui/icon-sprite": "^0.1.4",
22+
"@vercel/analytics": "^1.5.0",
23+
"clsx": "^2.1.1",
24+
"motion": "12.18.1",
25+
"next": "15.3.8",
26+
"react": "^19.0.0",
27+
"react-dom": "^19.0.0",
28+
"react-scan": "^0.4.3"
29+
},
30+
"devDependencies": {
31+
"@tailwindcss/postcss": "^4.1.10",
32+
"@types/node": "^20",
33+
"@types/react": "^19",
34+
"@types/react-dom": "^19",
35+
"postcss": "^8.5.5",
36+
"tailwindcss": "^4.1.10",
37+
"typescript": "^5"
38+
}
39+
}

‎packages/core/__tests__/fixtures/next/package.json‎

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,24 @@
11
{
2-
"name": "test-nextjs-app",
3-
"version": "1.0.0",
4-
"scripts": {
5-
"dev": "rm -rf .next && next dev",
6-
"build": "next build",
7-
"start": "next start",
8-
"clean": "rm -rf .next node_modules package-lock.json"
9-
},
10-
"dependencies": {
11-
"next": "^15.0.0",
12-
"react": "^18.2.0",
13-
"react-dom": "^18.2.0"
14-
},
15-
"devDependencies": {
16-
"@tailwindcss/postcss": "^4.1.10",
17-
"@types/node": "24.0.0",
18-
"@types/react": "19.1.7",
19-
"eslint-plugin-react-zero-ui": "0.0.1-beta.1",
20-
"postcss": "^8.5.5",
21-
"tailwindcss": "^4.1.10",
22-
"typescript": "5.8.3"
23-
}
2+
"name": "test-nextjs-app",
3+
"version": "1.0.0",
4+
"scripts": {
5+
"dev": "rm -rf .next && next dev",
6+
"build": "next build",
7+
"start": "next start",
8+
"clean": "rm -rf .next node_modules package-lock.json"
9+
},
10+
"dependencies": {
11+
"next": "15.0.7",
12+
"react": "^18.2.0",
13+
"react-dom": "^18.2.0"
14+
},
15+
"devDependencies": {
16+
"@tailwindcss/postcss": "^4.1.10",
17+
"@types/node": "24.0.0",
18+
"@types/react": "19.1.7",
19+
"eslint-plugin-react-zero-ui": "0.0.1-beta.1",
20+
"postcss": "^8.5.5",
21+
"tailwindcss": "^4.1.10",
22+
"typescript": "5.8.3"
23+
}
2424
}

‎packages/core/dev/next/package.json‎

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -1,30 +1,30 @@
11
{
2-
"name": "dev-next",
3-
"version": "1.0.0",
4-
"scripts": {
5-
"dev": "rm -rf .next && next dev",
6-
"build": "next build",
7-
"start": "next start",
8-
"clean": "rm -rf .next node_modules package-lock.json"
9-
},
10-
"pnpm": {
11-
"packageManager": "pnpm@latest",
12-
"installConfig": {
13-
"hoistPattern": []
14-
}
15-
},
16-
"dependencies": {
17-
"next": "^15.0.0",
18-
"react": "^18.2.0",
19-
"react-dom": "^18.2.0"
20-
},
21-
"devDependencies": {
22-
"@tailwindcss/postcss": "^4.1.10",
23-
"@types/node": "24.0.0",
24-
"@types/react": "19.1.7",
25-
"eslint-plugin-react-zero-ui": "0.0.1-beta.1",
26-
"postcss": "^8.5.5",
27-
"tailwindcss": "^4.1.10",
28-
"typescript": "5.8.3"
29-
}
30-
}
2+
"name": "dev-next",
3+
"version": "1.0.0",
4+
"scripts": {
5+
"dev": "rm -rf .next && next dev",
6+
"build": "next build",
7+
"start": "next start",
8+
"clean": "rm -rf .next node_modules package-lock.json"
9+
},
10+
"pnpm": {
11+
"packageManager": "pnpm@latest",
12+
"installConfig": {
13+
"hoistPattern": []
14+
}
15+
},
16+
"dependencies": {
17+
"next": "15.0.7",
18+
"react": "^18.2.0",
19+
"react-dom": "^18.2.0"
20+
},
21+
"devDependencies": {
22+
"@tailwindcss/postcss": "^4.1.10",
23+
"@types/node": "24.0.0",
24+
"@types/react": "19.1.7",
25+
"eslint-plugin-react-zero-ui": "0.0.1-beta.1",
26+
"postcss": "^8.5.5",
27+
"tailwindcss": "^4.1.10",
28+
"typescript": "5.8.3"
29+
}
30+
}

‎packages/eslint-zero-ui/__tests__/fixtures/next/package.json‎

Lines changed: 27 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,29 +1,29 @@
11
{
2-
"name": "eslint-test-nextjs-app",
3-
"version": "1.0.0",
4-
"scripts": {
5-
"dev": "rm -rf .next && next dev",
6-
"build": "next build",
7-
"start": "next start",
8-
"clean": "rm -rf .next node_modules package-lock.json",
9-
"lint": "eslint . --ext .js,.jsx,.ts,.tsx"
10-
},
11-
"dependencies": {
12-
"@react-zero-ui/core": "file:/Users/austinserb/Desktop/React-Zero/react-zero-ui/dist/react-zero-ui-core-0.3.1-beta.2.tgz",
13-
"next": "^15.0.0",
14-
"react": "^18.2.0",
15-
"react-dom": "^18.2.0"
16-
},
17-
"devDependencies": {
18-
"@eslint/eslintrc": "^3.3.1",
19-
"@tailwindcss/postcss": "^4.1.10",
20-
"@types/node": "24.0.0",
21-
"@types/react": "19.1.7",
22-
"eslint": "^9.32.0",
23-
"eslint-config-next": "^15.4.5",
24-
"eslint-zero-ui": "workspace:*",
25-
"postcss": "^8.5.5",
26-
"tailwindcss": "^4.1.10",
27-
"typescript": "5.8.3"
28-
}
2+
"name": "eslint-test-nextjs-app",
3+
"version": "1.0.0",
4+
"scripts": {
5+
"dev": "rm -rf .next && next dev",
6+
"build": "next build",
7+
"start": "next start",
8+
"clean": "rm -rf .next node_modules package-lock.json",
9+
"lint": "eslint . --ext .js,.jsx,.ts,.tsx"
10+
},
11+
"dependencies": {
12+
"@react-zero-ui/core": "file:/Users/austinserb/Desktop/React-Zero/react-zero-ui/dist/react-zero-ui-core-0.3.1-beta.2.tgz",
13+
"next": "15.0.7",
14+
"react": "^18.2.0",
15+
"react-dom": "^18.2.0"
16+
},
17+
"devDependencies": {
18+
"@eslint/eslintrc": "^3.3.1",
19+
"@tailwindcss/postcss": "^4.1.10",
20+
"@types/node": "24.0.0",
21+
"@types/react": "19.1.7",
22+
"eslint": "^9.32.0",
23+
"eslint-config-next": "^15.4.5",
24+
"eslint-zero-ui": "workspace:*",
25+
"postcss": "^8.5.5",
26+
"tailwindcss": "^4.1.10",
27+
"typescript": "5.8.3"
28+
}
2929
}

0 commit comments

Comments
 (0)