Fix React Server Components CVE vulnerabilities (#676)

vercel[bot] · haydenbleasel · web-flow · commit 0befb95cb52e · 2025-12-11T20:33:47.000-08:00
* Fix React Server Components CVE vulnerabilities

Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel &lt;vercel[bot]@users.noreply.github.com&gt;

* Fix deps

---------

Co-authored-by: Vercel &lt;vercel[bot]@users.noreply.github.com&gt;
Co-authored-by: Hayden Bleasel &lt;hello@haydenbleasel.com&gt;
diff --git a/apps/api/package.json b/apps/api/package.json
@@ -23,7 +23,7 @@
     "@sentry/nextjs": "^10.29.0",
     "@t3-oss/env-nextjs": "^0.13.8",
     "import-in-the-middle": "^2.0.0",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "react": "19.2.1",
     "react-dom": "19.2.1",
     "require-in-the-middle": "8.0.1",
diff --git a/apps/app/package.json b/apps/app/package.json
@@ -28,7 +28,7 @@
     "fuse.js": "^7.1.0",
     "import-in-the-middle": "^2.0.0",
     "lucide-react": "^0.556.0",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "next-themes": "^0.4.6",
     "react": "19.2.1",
     "react-dom": "19.2.1",
diff --git a/apps/email/package.json b/apps/email/package.json
@@ -20,7 +20,7 @@
     "@repo/typescript-config": "workspace:*",
     "@types/node": "24.10.1",
     "@types/react": "19.2.7",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "typescript": "^5.9.3"
   }
 }
diff --git a/apps/storybook/package.json b/apps/storybook/package.json
@@ -16,7 +16,7 @@
     "date-fns": "^4.1.0",
     "input-otp": "^1.4.2",
     "lucide-react": "^0.556.0",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "react": "19.2.1",
     "react-dom": "19.2.1",
     "react-hook-form": "^7.68.0",
diff --git a/apps/web/package.json b/apps/web/package.json
@@ -31,7 +31,7 @@
     "import-in-the-middle": "^2.0.0",
     "lucide-react": "^0.556.0",
     "mdx-bundler": "^10.1.1",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "react": "19.2.1",
     "react-dom": "19.2.1",
     "require-in-the-middle": "8.0.1",
diff --git a/docs/package.json b/docs/package.json
@@ -35,7 +35,7 @@
     "mermaid": "^11.12.2",
     "motion": "^12.23.25",
     "nanoid": "^5.1.6",
-    "next": "16.0.9",
+    "next": "16.0.10",
     "next-themes": "^0.4.6",
     "radix-ui": "latest",
     "react": "^19.2.1",
diff --git a/docs/pnpm-lock.yaml b/docs/pnpm-lock.yaml
diff --git a/packages/cms/package.json b/packages/cms/package.json
@@ -20,6 +20,6 @@
     "@types/node": "24.10.1",
     "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
-    "next": "16.0.9"
+    "next": "16.0.10"
   }
 }
diff --git a/packages/feature-flags/package.json b/packages/feature-flags/package.json
@@ -17,7 +17,7 @@
     "zod": "^4.1.13"
   },
   "peerDependencies": {
-    "next": "16.0.9"
+    "next": "16.0.10"
   },
   "devDependencies": {
     "@repo/typescript-config": "workspace:*",
diff --git a/packages/internationalization/package.json b/packages/internationalization/package.json
@@ -19,6 +19,6 @@
     "@types/node": "24.10.1",
     "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
-    "next": "16.0.9"
+    "next": "16.0.10"
   }
 }
diff --git a/packages/next-config/package.json b/packages/next-config/package.json
@@ -8,7 +8,7 @@
   },
   "devDependencies": {
     "@repo/typescript-config": "workspace:*",
-    "next": "16.0.9"
+    "next": "16.0.10"
   },
   "dependencies": {
     "@next/bundle-analyzer": "16.0.7",
diff --git a/packages/seo/package.json b/packages/seo/package.json
@@ -17,6 +17,6 @@
     "@types/node": "24.10.1",
     "@types/react": "19.2.7",
     "@types/react-dom": "19.2.3",
-    "next": "16.0.9"
+    "next": "16.0.10"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -20,7 +20,7 @@`
`20`	`20`	`"@repo/typescript-config": "workspace:*",`
`21`	`21`	`"@types/node": "24.10.1",`
`22`	`22`	`"@types/react": "19.2.7",`
`23`		`- "next": "16.0.9",`
	`23`	`+ "next": "16.0.10",`
`24`	`24`	`"typescript": "^5.9.3"`
`25`	`25`	`}`
`26`	`26`	`}`
Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,6 @@`
`20`	`20`	`"@types/node": "24.10.1",`
`21`	`21`	`"@types/react": "19.2.7",`
`22`	`22`	`"@types/react-dom": "19.2.3",`
`23`		`- "next": "16.0.9"`
	`23`	`+ "next": "16.0.10"`
`24`	`24`	`}`
`25`	`25`	`}`
Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,6 @@`
`19`	`19`	`"@types/node": "24.10.1",`
`20`	`20`	`"@types/react": "19.2.7",`
`21`	`21`	`"@types/react-dom": "19.2.3",`
`22`		`- "next": "16.0.9"`
	`22`	`+ "next": "16.0.10"`
`23`	`23`	`}`
`24`	`24`	`}`