fix(security): rce vulnerability in nextjs

2025-12-03 18:33:01 +01:00
parent d5d59dd256
commit b40deba9ff
14 changed files with 103 additions and 140 deletions
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -49,7 +49,7 @@
    "@trpc/server": "^11.7.2",
    "@trpc/tanstack-react-query": "^11.7.2",
    "lodash.clonedeep": "^4.5.0",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "superjson": "2.2.6",
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -35,7 +35,7 @@
    "bcrypt": "^6.0.0",
    "cookies": "^0.9.1",
    "ldapts": "8.0.9",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "next-auth": "5.0.0-beta.30",
    "react": "19.2.0",
    "react-dom": "19.2.0",
--- a/packages/common/package.json
+++ b/packages/common/package.json
@@ -32,7 +32,7 @@
    "@paralleldrive/cuid2": "^3.1.0",
    "dayjs": "^1.11.19",
    "dns-caching": "^0.2.7",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "octokit": "^5.0.5",
    "react": "19.2.0",
    "react-dom": "19.2.0",
--- a/packages/modals-collection/package.json
+++ b/packages/modals-collection/package.json
@@ -36,7 +36,7 @@
    "@mantine/core": "^8.3.9",
    "@tabler/icons-react": "^3.35.0",
    "dayjs": "^1.11.19",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "zod": "^4.1.13"
--- a/packages/old-import/package.json
+++ b/packages/old-import/package.json
@@ -40,7 +40,7 @@
    "@mantine/core": "^8.3.9",
    "@mantine/hooks": "^8.3.9",
    "adm-zip": "0.5.16",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "superjson": "2.2.6",
--- a/packages/settings/package.json
+++ b/packages/settings/package.json
@@ -27,7 +27,7 @@
    "@homarr/db": "workspace:^0.1.0",
    "@homarr/server-settings": "workspace:^0.1.0",
    "@mantine/dates": "^8.3.9",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0"
  },
--- a/packages/spotlight/package.json
+++ b/packages/spotlight/package.json
@@ -38,7 +38,7 @@
    "@mantine/spotlight": "^8.3.9",
    "@tabler/icons-react": "^3.35.0",
    "jotai": "^2.15.1",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "use-deep-compare-effect": "^1.8.1"
--- a/packages/translation/package.json
+++ b/packages/translation/package.json
@@ -32,7 +32,7 @@
    "dayjs": "^1.11.19",
    "deepmerge": "4.3.1",
    "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "next-intl": "4.5.6",
    "react": "19.2.0",
    "react-dom": "19.2.0"
--- a/packages/ui/package.json
+++ b/packages/ui/package.json
@@ -35,7 +35,7 @@
    "@mantine/hooks": "^8.3.9",
    "@tabler/icons-react": "^3.35.0",
    "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "svgson": "^5.3.1"
--- a/packages/widgets/package.json
+++ b/packages/widgets/package.json
@@ -72,7 +72,7 @@
    "dayjs": "^1.11.19",
    "mantine-form-zod-resolver": "^1.3.0",
    "mantine-react-table": "2.0.0-beta.9",
-    "next": "16.0.5",
+    "next": "16.0.7",
    "react": "19.2.0",
    "react-dom": "19.2.0",
    "react-markdown": "^10.1.0",