Skip to content

Upgrade to patch security vulnerability#11

Open
ctate wants to merge 1 commit intomengxi-ream:mainfrom
ctate:fix/nextjs-15-0-6-c7vhfw
Open

Upgrade to patch security vulnerability#11
ctate wants to merge 1 commit intomengxi-ream:mainfrom
ctate:fix/nextjs-15-0-6-c7vhfw

Conversation

@ctate
Copy link
Copy Markdown
Contributor

@ctate ctate commented Dec 11, 2025

This repository is listed on Vercel Templates.

This PR upgrades dependencies to patch a security vulnerability.

Action required

Please review the changes and run a quick test. If everything looks correct, you can merge this PR.
If you prefer to upgrade manually, feel free to close this and apply your own fix.

Thank you.


Summary by cubic

Upgrade Next.js to 15.0.6 to patch CVE-2025-55182 (React Server Components RCE). Patch release to keep the template secure; no app code changes.

  • Dependencies

    • next: 15.0.5 → 15.0.6 (lockfile updated)
  • Migration

    • pnpm install && pnpm build
    • Quick smoke test of pages using React Server Components

Written for commit 4abcce9. Summary will update automatically on new commits.

This upgrade fixes CVE-2025-55182, a React Server Components RCE vulnerability.
@vercel
Copy link
Copy Markdown

vercel bot commented Dec 11, 2025

@ctate is attempting to deploy a commit to the Feelio Team on Vercel.

A member of the Team first needs to authorize it.

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Dec 11, 2025

⚠️ No Changeset found

Latest commit: 4abcce9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@mengxi-ream
Copy link
Copy Markdown
Owner

mengxi-ream commented Dec 11, 2025

Hi, I have updated this just a few minutes ago

Thank you very much!

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants