tunapro/impact-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: next 16.2.4 -> 16.2.12, postcss/sharp override

Browse Source 
npm audit: 5 HIGH -> 0. Next.js DoS (Server Components) 16.2.12'de kapali.
next'in icine gomulu postcss (GHSA-r28c-9q8g-f849, sourceMappingURL ile
keyfi dosya okuma) ve sharp (GHSA-f88m-g3jw-g9cj, libvips) icin override.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
server-main
2026-08-01 22:52:28 +03:00
parent fdc607ce31
commit 300f59894c
2 changed files with 363 additions and 334 deletions
Download Patch File Download Diff File Expand all files Collapse all files

688
package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

9
package.json
View File

@@ -8,8 +8,13 @@
"start": "next start", "start": "next start",
"lint": "eslint" "lint": "eslint"
}, },
"comment_overrides": "next'in icine gomulu postcss/sharp HIGH acikli (GHSA-r28c-9q8g-f849 dosya okuma, GHSA-f88m-g3jw-g9cj libvips). next kendi bagimliligini guncelleyene kadar override ile zorluyoruz — 2026-08-01",
"overrides": {
"postcss": "^8.5.18",
"sharp": "^0.35.3"
},
"dependencies": { "dependencies": {
"next": "16.2.4", "next": "16.2.12",
"react": "19.2.4", "react": "19.2.4",
"react-dom": "19.2.4" "react-dom": "19.2.4"
}, },
@@ -19,7 +24,7 @@
"@types/react": "^19", "@types/react": "^19",
"@types/react-dom": "^19", "@types/react-dom": "^19",
"eslint": "^9", "eslint": "^9",
"eslint-config-next": "16.2.4", "eslint-config-next": "16.2.12",
"tailwindcss": "^4", "tailwindcss": "^4",
"typescript": "^5" "typescript": "^5"
} }