Skip to content

Commit 57b92b5

Browse files
security: add patched next devDependency for nextjs-webpack-plugin
Pins dev resolution to next ^14.2.25 for the middleware authorization bypass fix (GHSA-f82v-jwr5-mffw) while keeping peer range 14.x || 15.x. Made-with: Cursor
1 parent 866e31a commit 57b92b5

File tree

2 files changed

+32
-142
lines changed

2 files changed

+32
-142
lines changed

packages/nextjs-webpack-plugin/package.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,7 @@
5757
"@vitest/coverage-v8": "^2.1.9",
5858
"codecovProdRollupPlugin": "npm:@codecov/rollup-plugin@1.5.0",
5959
"msw": "^2.7.0",
60+
"next": "^14.2.25",
6061
"ts-node": "^10.9.2",
6162
"typedoc": "^0.27.5",
6263
"typescript": "^5.3.3",

0 commit comments

Comments
 (0)