Skip to content

Fix React Server Components CVE vulnerabilities#38

Merged
ruru-m07 merged 3 commits intomainfrom
release
Jan 15, 2026
Merged

Fix React Server Components CVE vulnerabilities#38
ruru-m07 merged 3 commits intomainfrom
release

Conversation

@ruru-m07
Copy link
Owner

Description

What type of PR is this? (check all applicable)

  • 🍕 Feature
  • 🐛 Bug Fix
  • 📝 Documentation Update
  • 🎨 Style
  • 🧑‍💻 Code Refactor
  • 🔥 Performance Improvements
  • ✅ Test
  • 🤖 Build
  • 🔁 CI
  • 📦 Chore (Release)
  • ⏩ Revert

Mobile & Desktop Screenshots/Recordings

vercel bot and others added 2 commits January 15, 2026 05:50
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
@vercel
Copy link
Contributor

vercel bot commented Jan 15, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
commitly Ready Ready Preview, Comment Jan 15, 2026 5:56am

@github-actions
Copy link

github-actions bot commented Jan 15, 2026

Dependency Review

The following issues were found:

  • ❌ 1 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
  • ⚠️ 20 packages with OpenSSF Scorecard issues.

View full job summary

@ruru-m07 ruru-m07 merged commit 25f5393 into main Jan 15, 2026
1 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant