From 3ca83e5869660a17b38dadaefc704aca23df6db7 Mon Sep 17 00:00:00 2001 From: Vercel Date: Tue, 28 Apr 2026 14:00:40 +0000 Subject: [PATCH 1/2] Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index c333d219..831d2711 100644 --- a/package.json +++ b/package.json @@ -66,7 +66,7 @@ "lodash": "4.17.21", "lucide-react": "0.436.0", "moment": "2.30.1", - "next": "14.2.3", + "next": "14.2.35", "posthog-js": "1.187.2", "prism-react-renderer": "2.4.0", "punycode": "2.3.1", From 01d91c6a5335b76ae0649d39967d625985071902 Mon Sep 17 00:00:00 2001 From: anthony Date: Tue, 28 Apr 2026 17:09:43 +0300 Subject: [PATCH 2/2] fix(console): yarn --- yarn.lock | 94 +++++++++++++++++++++++++++---------------------------- 1 file changed, 47 insertions(+), 47 deletions(-) diff --git a/yarn.lock b/yarn.lock index 7d3466b7..a8fe4c0c 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5471,10 +5471,10 @@ __metadata: languageName: node linkType: hard -"@next/env@npm:14.2.3": - version: 14.2.3 - resolution: "@next/env@npm:14.2.3" - checksum: 10c0/25ab3ac2739c8e5ce35e1f50373238c5c428ab6b01d448ba78a6068dcdef88978b64f9a92790c324b2926ccc41390a67107154a0b0fee32fe980a485f4ef20d8 +"@next/env@npm:14.2.35": + version: 14.2.35 + resolution: "@next/env@npm:14.2.35" + checksum: 10c0/e042f1771f91d4f69b296aa7f633df216464df5844e5e1ea46105b76b2e519093dff4b25df9a24576916811b65a7e896202b2540649af5aa54bd7f8b19d7b6ab languageName: node linkType: hard @@ -5487,65 +5487,65 @@ __metadata: languageName: node linkType: hard -"@next/swc-darwin-arm64@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-darwin-arm64@npm:14.2.3" +"@next/swc-darwin-arm64@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-darwin-arm64@npm:14.2.33" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard -"@next/swc-darwin-x64@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-darwin-x64@npm:14.2.3" +"@next/swc-darwin-x64@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-darwin-x64@npm:14.2.33" conditions: os=darwin & cpu=x64 languageName: node linkType: hard -"@next/swc-linux-arm64-gnu@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-linux-arm64-gnu@npm:14.2.3" +"@next/swc-linux-arm64-gnu@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-linux-arm64-gnu@npm:14.2.33" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard -"@next/swc-linux-arm64-musl@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-linux-arm64-musl@npm:14.2.3" +"@next/swc-linux-arm64-musl@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-linux-arm64-musl@npm:14.2.33" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard -"@next/swc-linux-x64-gnu@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-linux-x64-gnu@npm:14.2.3" +"@next/swc-linux-x64-gnu@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-linux-x64-gnu@npm:14.2.33" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard -"@next/swc-linux-x64-musl@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-linux-x64-musl@npm:14.2.3" +"@next/swc-linux-x64-musl@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-linux-x64-musl@npm:14.2.33" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard -"@next/swc-win32-arm64-msvc@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-win32-arm64-msvc@npm:14.2.3" +"@next/swc-win32-arm64-msvc@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-win32-arm64-msvc@npm:14.2.33" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard -"@next/swc-win32-ia32-msvc@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-win32-ia32-msvc@npm:14.2.3" +"@next/swc-win32-ia32-msvc@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-win32-ia32-msvc@npm:14.2.33" conditions: os=win32 & cpu=ia32 languageName: node linkType: hard -"@next/swc-win32-x64-msvc@npm:14.2.3": - version: 14.2.3 - resolution: "@next/swc-win32-x64-msvc@npm:14.2.3" +"@next/swc-win32-x64-msvc@npm:14.2.33": + version: 14.2.33 + resolution: "@next/swc-win32-x64-msvc@npm:14.2.33" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -25448,7 +25448,7 @@ __metadata: lodash: "npm:4.17.21" lucide-react: "npm:0.436.0" moment: "npm:2.30.1" - next: "npm:14.2.3" + next: "npm:14.2.35" nx: "npm:19.7.3" nx-release: "npm:3.3.0" postcss: "npm:8.4.38" @@ -27388,20 +27388,20 @@ __metadata: languageName: node linkType: hard -"next@npm:14.2.3": - version: 14.2.3 - resolution: "next@npm:14.2.3" - dependencies: - "@next/env": "npm:14.2.3" - "@next/swc-darwin-arm64": "npm:14.2.3" - "@next/swc-darwin-x64": "npm:14.2.3" - "@next/swc-linux-arm64-gnu": "npm:14.2.3" - "@next/swc-linux-arm64-musl": "npm:14.2.3" - "@next/swc-linux-x64-gnu": "npm:14.2.3" - "@next/swc-linux-x64-musl": "npm:14.2.3" - "@next/swc-win32-arm64-msvc": "npm:14.2.3" - "@next/swc-win32-ia32-msvc": "npm:14.2.3" - "@next/swc-win32-x64-msvc": "npm:14.2.3" +"next@npm:14.2.35": + version: 14.2.35 + resolution: "next@npm:14.2.35" + dependencies: + "@next/env": "npm:14.2.35" + "@next/swc-darwin-arm64": "npm:14.2.33" + "@next/swc-darwin-x64": "npm:14.2.33" + "@next/swc-linux-arm64-gnu": "npm:14.2.33" + "@next/swc-linux-arm64-musl": "npm:14.2.33" + "@next/swc-linux-x64-gnu": "npm:14.2.33" + "@next/swc-linux-x64-musl": "npm:14.2.33" + "@next/swc-win32-arm64-msvc": "npm:14.2.33" + "@next/swc-win32-ia32-msvc": "npm:14.2.33" + "@next/swc-win32-x64-msvc": "npm:14.2.33" "@swc/helpers": "npm:0.5.5" busboy: "npm:1.6.0" caniuse-lite: "npm:^1.0.30001579" @@ -27442,7 +27442,7 @@ __metadata: optional: true bin: next: dist/bin/next - checksum: 10c0/2c409154720846d07a7a995cc3bfba24b9ee73c87360ce3266528c8a217f5f1ab6f916cffbe1be83509b4e8d7b1d713921bb5c69338b4ecaa57df3212f79a8c5 + checksum: 10c0/5b1eadd554cd2cb1f030335d71a9363d16d86453f60a2331333887804c8b4b04a16fcb1ddb58229b792b6c365dbd0fafd9ccacd727c85134101a124bd6b4c06a languageName: node linkType: hard