Skip to content

Conversation

@MikeMcC399
Copy link
Contributor

Situation

Vercel has reported a critical vulnerability CVE-2025-55182 in next<15.5.7.

Change

Use npm update --save to update dependencies according to their semver definitions.

This includes updating from [email protected] to [email protected].

Verification

Execute:

cd react-next15-ts
npm ci
npm audit
npm run cypress:run

and confirm "found 0 vulnerabilities" and "All specs passed!".

Update all dependencies according to their semver settings,
including next to 15.5.7 for CVE-2025-55182 critical vulnerability
@MikeMcC399 MikeMcC399 marked this pull request as ready for review December 6, 2025 10:04
@AtofStryker
Copy link
Contributor

Thank you for updating this, @MikeMcC399!

@AtofStryker AtofStryker merged commit 26e7815 into cypress-io:main Dec 8, 2025
10 checks passed
@MikeMcC399
Copy link
Contributor Author

@AtofStryker

Thank you for updating this, @MikeMcC399!

Sure! The vulnerability is getting a lot of media attention, so this is making sure the repo is a good example to follow!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants