Skip to content

Conversation

@CruzMolina
Copy link
Member

@CruzMolina CruzMolina commented Dec 12, 2025

Address DoS vulnerability GHSA-5j59-xgg2-r9c4 in Next.js Server Components (incomplete fix follow-up for CVE-2025-55184).

  • Bump next from 15.5.8 to 15.5.9
  • Bump eslint-config-next from 15.5.8 to 15.5.9

Note

Updates Next.js and eslint-config-next to 15.5.9 and adds a routes types reference to next-env.d.ts.

  • Dependencies:
    • Bump next to 15.5.9.
    • Bump eslint-config-next to 15.5.9.
  • TypeScript:
    • Add /// <reference path="./.next/types/routes.d.ts" /> in next-env.d.ts.

Written by Cursor Bugbot for commit 16aa232. This will update automatically on new commits. Configure here.

Address DoS vulnerability GHSA-5j59-xgg2-r9c4 in Next.js Server
Components (incomplete fix follow-up for CVE-2025-55184).

- Bump next from 15.5.8 to 15.5.9
- Bump eslint-config-next from 15.5.8 to 15.5.9
@CruzMolina CruzMolina requested a review from a team as a code owner December 12, 2025 18:00
@CruzMolina CruzMolina enabled auto-merge (squash) December 12, 2025 18:00
@CruzMolina CruzMolina merged commit a4323dd into main Dec 12, 2025
19 checks passed
@CruzMolina CruzMolina deleted the build/CVE-2025-55184 branch December 12, 2025 18:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants