From 51338c943fc58b7dbb689ce4edd3f1a59b6b12ec Mon Sep 17 00:00:00 2001
From: Vercel <vercel[bot]@users.noreply.github.com>
Date: Wed, 10 Dec 2025 20:02:00 +0000
Subject: [PATCH] Update React Flight/Next.js RCE vulnerability patches

Updated dependencies to fix Next.js CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
---
 apps/app/package.json           | 2 +-
 packages/auth/package.json      | 2 +-
 packages/blocknote/package.json | 4 ++--
 packages/lib/package.json       | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/apps/app/package.json b/apps/app/package.json
index 229863a2f..1c6ef722c 100644
--- a/apps/app/package.json
+++ b/apps/app/package.json
@@ -55,7 +55,7 @@
     "lucide-react": "catalog:",
     "maplibre-gl": "^5.7.2",
     "motion": "catalog:",
-    "next": "catalog:",
+    "next": "15.5.7",
     "next-safe-action": "catalog:",
     "next-themes": "catalog:",
     "next-video": "^2.5.0",
diff --git a/packages/auth/package.json b/packages/auth/package.json
index d27af023a..b097b74c3 100644
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -9,7 +9,7 @@
     "@t3-oss/env-nextjs": "catalog:",
     "bcryptjs": "catalog:",
     "jose": "catalog:",
-    "next": "catalog:",
+    "next": "15.5.7",
     "react": "catalog:",
     "react-dom": "catalog:",
     "zod": "catalog:"
diff --git a/packages/blocknote/package.json b/packages/blocknote/package.json
index 32f8ca2fc..371ad3164 100644
--- a/packages/blocknote/package.json
+++ b/packages/blocknote/package.json
@@ -20,7 +20,7 @@
     "@mapform/ui": "workspace:*",
     "@tanstack/react-query": "catalog:",
     "lucide-react": "catalog:",
-    "next": "catalog:",
+    "next": "15.5.7",
     "zod": "catalog:"
   },
   "devDependencies": {
@@ -36,4 +36,4 @@
     "tailwindcss": "catalog:",
     "typescript": "catalog:"
   }
-}
\ No newline at end of file
+}
diff --git a/packages/lib/package.json b/packages/lib/package.json
index 280689b97..d98ff8a13 100644
--- a/packages/lib/package.json
+++ b/packages/lib/package.json
@@ -7,7 +7,7 @@
     "clsx": "catalog:",
     "lodash-es": "catalog:",
     "lucide-react": "catalog:",
-    "next": "catalog:",
+    "next": "15.5.7",
     "stripe": "catalog:",
     "tailwind-merge": "catalog:",
     "zod": "catalog:"