Commit b73b1ec
Fix critical security vulnerabilities CVE-2025-66478 and CVE-2025-55182
- Update Next.js from 15.4.2 to 16.0.7 (fixes CVE-2025-66478)
- Update React and React-DOM from 19.1.0 to 19.1.2 (fixes CVE-2025-55182)
- Update @next/third-parties from 15.4.4 to 16.0.7
- Update eslint-config-next from 15.4.2 to 16.0.7
- Upgrade GitHub Actions Node.js version from 18 to 20
- Update TypeScript configuration for Next.js 16 compatibility
Both vulnerabilities are CVSS 10.0 critical RCE vulnerabilities in React Server Components.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>1 parent f25c861 commit b73b1ec
4 files changed
Lines changed: 749 additions & 374 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
27 | | - | |
| 27 | + | |
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
| |||
0 commit comments