Skip to content

Fix React Server Components CVE vulnerabilities#127

Closed
ah100101 wants to merge 139 commits into
uniformdev:mainfrom
ah100101:fix/cve-2025-66478
Closed

Fix React Server Components CVE vulnerabilities#127
ah100101 wants to merge 139 commits into
uniformdev:mainfrom
ah100101:fix/cve-2025-66478

Conversation

@ah100101
Copy link
Copy Markdown

This PR upgrades dependencies to patch a security vulnerability.

Action required

Please review the changes and run a quick test. If everything looks correct, you can merge this PR. If you prefer to upgrade manually, feel free to close this and apply your own fix.

Thank you.

M1r1k and others added 30 commits October 27, 2022 18:28
…-dependabot-for-our-examples

chore: add Renovate config
feat(canvas-react): switch from manual component resolver to component registry
renovate Bot and others added 28 commits November 8, 2023 18:58
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.
@alexshyba alexshyba deleted the branch uniformdev:main December 13, 2025 02:12
@alexshyba alexshyba closed this Dec 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants