Fix React Server Components CVE vulnerabilities #1

Merged
vercel[bot] merged 1 commit from vercel/react-server-components-cve-vu-a6jgk2 into main 2026-02-07 14:05:19 +01:00

1 commit

Author SHA1 Message Date
Vercel
8becd360c8 Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2026-02-07 12:46:44 +00:00