eliott/openwork
1
0
Fork 0
mirror of https://github.com/different-ai/openwork synced 2026-04-25 17:15:34 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix React Server Components CVE vulnerabilities (#1314)

Browse Source 
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
This commit is contained in:
vercel[bot]
2026-04-04 00:07:34 -06:00
committed by GitHub
parent 28f7346546
commit 0864d81544
2 changed files with 49 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

97
pnpm-lock.yaml generated
View File

@@ -517,7 +517,7 @@ importers:
version: link:../../../packages/ui
botid:
specifier: ^1.5.11
version: 1.5.11(next@14.2.5(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0))(react@18.2.0)
version: 1.5.11(next@14.2.35(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0))(react@18.2.0)
framer-motion:
specifier: ^12.35.1
version: 12.35.1(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
@@ -525,8 +525,8 @@ importers:
specifier: ^0.577.0
version: 0.577.0(react@18.2.0)
next:
specifier: 14.2.5
version: 14.2.5(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
specifier: 14.2.35
version: 14.2.35(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
react:
specifier: 18.2.0
version: 18.2.0
@@ -1833,8 +1833,8 @@ packages:
'@marijn/find-cluster-break@1.0.2':
resolution: {integrity: sha512-l0h88YhZFyKdXIFNfSWpyjStDjGHwZ/U7iobcK1cQQD8sejsONdQtTVU+1wVN1PBw40PiiHB1vA5S7VTfQiP9g==}
'@next/env@14.2.5':
resolution: {integrity: sha512-/zZGkrTOsraVfYjGP8uM0p6r0BDT6xWpkjdVbcz66PJVSpwXX3yNiRycxAuDfBKGWBrZBXRuK/YVlkNgxHGwmA==}
'@next/env@14.2.35':
resolution: {integrity: sha512-DuhvCtj4t9Gwrx80dmz2F4t/zKQ4ktN8WrMwOuVzkJfBilwAwGr6v16M5eI8yCuZ63H9TTuEU09Iu2HqkzFPVQ==}
'@next/env@16.1.6':
resolution: {integrity: sha512-N1ySLuZjnAtN3kFnwhAwPvZah8RJxKasD7x1f8shFqhncnWZn4JMfg37diLNuoHsLAlrDfM3g4mawVdtAG8XLQ==}
@@ -1842,8 +1842,8 @@ packages:
'@next/env@16.2.1':
resolution: {integrity: sha512-n8P/HCkIWW+gVal2Z8XqXJ6aB3J0tuM29OcHpCsobWlChH/SITBs1DFBk/HajgrwDkqqBXPbuUuzgDvUekREPg==}
'@next/swc-darwin-arm64@14.2.5':
resolution: {integrity: sha512-/9zVxJ+K9lrzSGli1///ujyRfon/ZneeZ+v4ptpiPoOU+GKZnm8Wj8ELWU1Pm7GHltYRBklmXMTUqM/DqQ99FQ==}
'@next/swc-darwin-arm64@14.2.33':
resolution: {integrity: sha512-HqYnb6pxlsshoSTubdXKu15g3iivcbsMXg4bYpjL2iS/V6aQot+iyF4BUc2qA/J/n55YtvE4PHMKWBKGCF/+wA==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [darwin]
@@ -1860,8 +1860,8 @@ packages:
cpu: [arm64]
os: [darwin]
'@next/swc-darwin-x64@14.2.5':
resolution: {integrity: sha512-vXHOPCwfDe9qLDuq7U1OYM2wUY+KQ4Ex6ozwsKxp26BlJ6XXbHleOUldenM67JRyBfVjv371oneEvYd3H2gNSA==}
'@next/swc-darwin-x64@14.2.33':
resolution: {integrity: sha512-8HGBeAE5rX3jzKvF593XTTFg3gxeU4f+UWnswa6JPhzaR6+zblO5+fjltJWIZc4aUalqTclvN2QtTC37LxvZAA==}
engines: {node: '>= 10'}
cpu: [x64]
os: [darwin]
@@ -1878,8 +1878,8 @@ packages:
cpu: [x64]
os: [darwin]
'@next/swc-linux-arm64-gnu@14.2.5':
resolution: {integrity: sha512-vlhB8wI+lj8q1ExFW8lbWutA4M2ZazQNvMWuEDqZcuJJc78iUnLdPPunBPX8rC4IgT6lIx/adB+Cwrl99MzNaA==}
'@next/swc-linux-arm64-gnu@14.2.33':
resolution: {integrity: sha512-JXMBka6lNNmqbkvcTtaX8Gu5by9547bukHQvPoLe9VRBx1gHwzf5tdt4AaezW85HAB3pikcvyqBToRTDA4DeLw==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [linux]
@@ -1896,8 +1896,8 @@ packages:
cpu: [arm64]
os: [linux]
'@next/swc-linux-arm64-musl@14.2.5':
resolution: {integrity: sha512-NpDB9NUR2t0hXzJJwQSGu1IAOYybsfeB+LxpGsXrRIb7QOrYmidJz3shzY8cM6+rO4Aojuef0N/PEaX18pi9OA==}
'@next/swc-linux-arm64-musl@14.2.33':
resolution: {integrity: sha512-Bm+QulsAItD/x6Ih8wGIMfRJy4G73tu1HJsrccPW6AfqdZd0Sfm5Imhgkgq2+kly065rYMnCOxTBvmvFY1BKfg==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [linux]
@@ -1914,8 +1914,8 @@ packages:
cpu: [arm64]
os: [linux]
'@next/swc-linux-x64-gnu@14.2.5':
resolution: {integrity: sha512-8XFikMSxWleYNryWIjiCX+gU201YS+erTUidKdyOVYi5qUQo/gRxv/3N1oZFCgqpesN6FPeqGM72Zve+nReVXQ==}
'@next/swc-linux-x64-gnu@14.2.33':
resolution: {integrity: sha512-FnFn+ZBgsVMbGDsTqo8zsnRzydvsGV8vfiWwUo1LD8FTmPTdV+otGSWKc4LJec0oSexFnCYVO4hX8P8qQKaSlg==}
engines: {node: '>= 10'}
cpu: [x64]
os: [linux]
@@ -1932,8 +1932,8 @@ packages:
cpu: [x64]
os: [linux]
'@next/swc-linux-x64-musl@14.2.5':
resolution: {integrity: sha512-6QLwi7RaYiQDcRDSU/os40r5o06b5ue7Jsk5JgdRBGGp8l37RZEh9JsLSM8QF0YDsgcosSeHjglgqi25+m04IQ==}
'@next/swc-linux-x64-musl@14.2.33':
resolution: {integrity: sha512-345tsIWMzoXaQndUTDv1qypDRiebFxGYx9pYkhwY4hBRaOLt8UGfiWKr9FSSHs25dFIf8ZqIFaPdy5MljdoawA==}
engines: {node: '>= 10'}
cpu: [x64]
os: [linux]
@@ -1950,8 +1950,8 @@ packages:
cpu: [x64]
os: [linux]
'@next/swc-win32-arm64-msvc@14.2.5':
resolution: {integrity: sha512-1GpG2VhbspO+aYoMOQPQiqc/tG3LzmsdBH0LhnDS3JrtDx2QmzXe0B6mSZZiN3Bq7IOMXxv1nlsjzoS1+9mzZw==}
'@next/swc-win32-arm64-msvc@14.2.33':
resolution: {integrity: sha512-nscpt0G6UCTkrT2ppnJnFsYbPDQwmum4GNXYTeoTIdsmMydSKFz9Iny2jpaRupTb+Wl298+Rh82WKzt9LCcqSQ==}
engines: {node: '>= 10'}
cpu: [arm64]
os: [win32]
@@ -1968,14 +1968,14 @@ packages:
cpu: [arm64]
os: [win32]
'@next/swc-win32-ia32-msvc@14.2.5':
resolution: {integrity: sha512-Igh9ZlxwvCDsu6438FXlQTHlRno4gFpJzqPjSIBZooD22tKeI4fE/YMRoHVJHmrQ2P5YL1DoZ0qaOKkbeFWeMg==}
'@next/swc-win32-ia32-msvc@14.2.33':
resolution: {integrity: sha512-pc9LpGNKhJ0dXQhZ5QMmYxtARwwmWLpeocFmVG5Z0DzWq5Uf0izcI8tLc+qOpqxO1PWqZ5A7J1blrUIKrIFc7Q==}
engines: {node: '>= 10'}
cpu: [ia32]
os: [win32]
'@next/swc-win32-x64-msvc@14.2.5':
resolution: {integrity: sha512-tEQ7oinq1/CjSG9uSTerca3v4AZ+dFa+4Yu6ihaG8Ud8ddqLQgFGcnwYls13H5X5CPDPZJdYxyeMui6muOLd4g==}
'@next/swc-win32-x64-msvc@14.2.33':
resolution: {integrity: sha512-nOjfZMy8B94MdisuzZo9/57xuFVLHJaDj5e/xrduJp9CV2/HrfxTRH2fbyLe+K9QT41WBLUd4iXX3R7jBp0EUg==}
engines: {node: '>= 10'}
cpu: [x64]
os: [win32]
@@ -4144,10 +4144,9 @@ packages:
resolution: {integrity: sha512-yJBmDJr18xy47dbNVlHcgdPrulSn1nhSE6Ns9vTG+Nx9VPT6iV1MD6aQFp/t52zpf82FhLLTXAXr30NuCnxvwA==}
engines: {node: ^20.0.0 || >=22.0.0}
next@14.2.5:
resolution: {integrity: sha512-0f8aRfBVL+mpzfBjYfQuLWh2WyAwtJXCRfkPF4UJ5qd2YwrHczsrSzXU4tRMV0OAxR8ZJZWPFn6uhSC56UTsLA==}
next@14.2.35:
resolution: {integrity: sha512-KhYd2Hjt/O1/1aZVX3dCwGXM1QmOV4eNM2UTacK5gipDdPN/oHHK/4oVGy7X8GMfPMsUTUEmGlsy0EY1YGAkig==}
engines: {node: '>=18.17.0'}
deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/security-update-2025-12-11 for more details.
hasBin: true
peerDependencies:
'@opentelemetry/api': ^1.1.0
@@ -6568,13 +6567,13 @@ snapshots:
'@marijn/find-cluster-break@1.0.2': {}
'@next/env@14.2.5': {}
'@next/env@14.2.35': {}
'@next/env@16.1.6': {}
'@next/env@16.2.1': {}
'@next/swc-darwin-arm64@14.2.5':
'@next/swc-darwin-arm64@14.2.33':
optional: true
'@next/swc-darwin-arm64@16.1.6':
@@ -6583,7 +6582,7 @@ snapshots:
'@next/swc-darwin-arm64@16.2.1':
optional: true
'@next/swc-darwin-x64@14.2.5':
'@next/swc-darwin-x64@14.2.33':
optional: true
'@next/swc-darwin-x64@16.1.6':
@@ -6592,7 +6591,7 @@ snapshots:
'@next/swc-darwin-x64@16.2.1':
optional: true
'@next/swc-linux-arm64-gnu@14.2.5':
'@next/swc-linux-arm64-gnu@14.2.33':
optional: true
'@next/swc-linux-arm64-gnu@16.1.6':
@@ -6601,7 +6600,7 @@ snapshots:
'@next/swc-linux-arm64-gnu@16.2.1':
optional: true
'@next/swc-linux-arm64-musl@14.2.5':
'@next/swc-linux-arm64-musl@14.2.33':
optional: true
'@next/swc-linux-arm64-musl@16.1.6':
@@ -6610,7 +6609,7 @@ snapshots:
'@next/swc-linux-arm64-musl@16.2.1':
optional: true
'@next/swc-linux-x64-gnu@14.2.5':
'@next/swc-linux-x64-gnu@14.2.33':
optional: true
'@next/swc-linux-x64-gnu@16.1.6':
@@ -6619,7 +6618,7 @@ snapshots:
'@next/swc-linux-x64-gnu@16.2.1':
optional: true
'@next/swc-linux-x64-musl@14.2.5':
'@next/swc-linux-x64-musl@14.2.33':
optional: true
'@next/swc-linux-x64-musl@16.1.6':
@@ -6628,7 +6627,7 @@ snapshots:
'@next/swc-linux-x64-musl@16.2.1':
optional: true
'@next/swc-win32-arm64-msvc@14.2.5':
'@next/swc-win32-arm64-msvc@14.2.33':
optional: true
'@next/swc-win32-arm64-msvc@16.1.6':
@@ -6637,10 +6636,10 @@ snapshots:
'@next/swc-win32-arm64-msvc@16.2.1':
optional: true
'@next/swc-win32-ia32-msvc@14.2.5':
'@next/swc-win32-ia32-msvc@14.2.33':
optional: true
'@next/swc-win32-x64-msvc@14.2.5':
'@next/swc-win32-x64-msvc@14.2.33':
optional: true
'@next/swc-win32-x64-msvc@16.1.6':
@@ -8078,9 +8077,9 @@ snapshots:
bmp-ts@1.0.9: {}
botid@1.5.11(next@14.2.5(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0))(react@18.2.0):
botid@1.5.11(next@14.2.35(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0))(react@18.2.0):
optionalDependencies:
next: 14.2.5(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
next: 14.2.35(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0)
react: 18.2.0
botid@1.5.11(next@16.1.6(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(react@19.2.4):
@@ -8845,9 +8844,9 @@ snapshots:
nanostores@1.1.0: {}
next@14.2.5(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
next@14.2.35(@opentelemetry/api@1.9.0)(@playwright/test@1.58.2)(react-dom@18.2.0(react@18.2.0))(react@18.2.0):
dependencies:
'@next/env': 14.2.5
'@next/env': 14.2.35
'@swc/helpers': 0.5.5
busboy: 1.6.0
caniuse-lite: 1.0.30001764
@@ -8857,15 +8856,15 @@ snapshots:
react-dom: 18.2.0(react@18.2.0)
styled-jsx: 5.1.1(react@18.2.0)
optionalDependencies:
'@next/swc-darwin-arm64': 14.2.5
'@next/swc-darwin-x64': 14.2.5
'@next/swc-linux-arm64-gnu': 14.2.5
'@next/swc-linux-arm64-musl': 14.2.5
'@next/swc-linux-x64-gnu': 14.2.5
'@next/swc-linux-x64-musl': 14.2.5
'@next/swc-win32-arm64-msvc': 14.2.5
'@next/swc-win32-ia32-msvc': 14.2.5
'@next/swc-win32-x64-msvc': 14.2.5
'@next/swc-darwin-arm64': 14.2.33
'@next/swc-darwin-x64': 14.2.33
'@next/swc-linux-arm64-gnu': 14.2.33
'@next/swc-linux-arm64-musl': 14.2.33
'@next/swc-linux-x64-gnu': 14.2.33
'@next/swc-linux-x64-musl': 14.2.33
'@next/swc-win32-arm64-msvc': 14.2.33
'@next/swc-win32-ia32-msvc': 14.2.33
'@next/swc-win32-x64-msvc': 14.2.33
'@opentelemetry/api': 1.9.0
'@playwright/test': 1.58.2
transitivePeerDependencies: