fix(login): CVE-2025-55184 and CVE-2025-55183, update next (#11179)

# Which Problems Are Solved

Updates `next` to version `15.5.9` to address the following security
vulnerabilities:

- **CVE-2025-55184**
- **CVE-2025-55183**

# How the Problems Are Solved

- Bump `next` from `15.5.7` to `15.5.9` in `apps/login/package.json`

---------

Co-authored-by: PhenixH <PhenixH@users.noreply.github.com>

(cherry picked from commit 2221b5ef74)
This commit is contained in:
Max Peintner
2025-12-12 13:01:05 +01:00
committed by Livio Spring
parent bf8eb70cd2
commit 1b8476afe8
2 changed files with 26 additions and 26 deletions

View File

@@ -36,7 +36,7 @@
"deepmerge": "^4.3.1", "deepmerge": "^4.3.1",
"lucide-react": "0.469.0", "lucide-react": "0.469.0",
"moment": "^2.29.4", "moment": "^2.29.4",
"next": "15.5.7", "next": "15.5.9",
"next-intl": "^3.25.1", "next-intl": "^3.25.1",
"next-themes": "^0.2.1", "next-themes": "^0.2.1",
"nice-grpc": "2.0.1", "nice-grpc": "2.0.1",
@@ -75,7 +75,7 @@
"dotenv-cli": "^8.0.0", "dotenv-cli": "^8.0.0",
"env-cmd": "^10.1.0", "env-cmd": "^10.1.0",
"eslint": "^8.57.0", "eslint": "^8.57.0",
"eslint-config-next": "15.5.7", "eslint-config-next": "15.5.9",
"eslint-config-prettier": "^9.1.0", "eslint-config-prettier": "^9.1.0",
"gaxios": "^7.1.0", "gaxios": "^7.1.0",
"grpc-tools": "1.13.0", "grpc-tools": "1.13.0",

48
pnpm-lock.yaml generated
View File

@@ -54,14 +54,14 @@ importers:
specifier: ^2.29.4 specifier: ^2.29.4
version: 2.30.1 version: 2.30.1
next: next:
specifier: 15.5.7 specifier: 15.5.9
version: 15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1) version: 15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1)
next-intl: next-intl:
specifier: ^3.25.1 specifier: ^3.25.1
version: 3.26.5(next@15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react@19.1.2) version: 3.26.5(next@15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react@19.1.2)
next-themes: next-themes:
specifier: ^0.2.1 specifier: ^0.2.1
version: 0.2.1(next@15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react-dom@19.1.2(react@19.1.2))(react@19.1.2) version: 0.2.1(next@15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react-dom@19.1.2(react@19.1.2))(react@19.1.2)
nice-grpc: nice-grpc:
specifier: 2.0.1 specifier: 2.0.1
version: 2.0.1 version: 2.0.1
@@ -166,8 +166,8 @@ importers:
specifier: ^8.57.0 specifier: ^8.57.0
version: 8.57.1 version: 8.57.1
eslint-config-next: eslint-config-next:
specifier: 15.5.7 specifier: 15.5.9
version: 15.5.7(eslint@8.57.1)(typescript@5.9.2) version: 15.5.9(eslint@8.57.1)(typescript@5.9.2)
eslint-config-prettier: eslint-config-prettier:
specifier: ^9.1.0 specifier: ^9.1.0
version: 9.1.2(eslint@8.57.1) version: 9.1.2(eslint@8.57.1)
@@ -3415,11 +3415,11 @@ packages:
resolution: {integrity: sha512-kPTF5yemdmadP/+qMDcc3p10NkZKXHXGm2BCFvB192paCNxQrSJz+qb56SO+kvSn9exg+HvhGJ0gfIcVwPjzWw==} resolution: {integrity: sha512-kPTF5yemdmadP/+qMDcc3p10NkZKXHXGm2BCFvB192paCNxQrSJz+qb56SO+kvSn9exg+HvhGJ0gfIcVwPjzWw==}
engines: {node: ^14.14.0 || >=16.0.0} engines: {node: ^14.14.0 || >=16.0.0}
'@next/env@15.5.7': '@next/env@15.5.9':
resolution: {integrity: sha512-4h6Y2NyEkIEN7Z8YxkA27pq6zTkS09bUSYC0xjd0NpwFxjnIKeZEeH591o5WECSmjpUhLn3H2QLJcDye3Uzcvg==} resolution: {integrity: sha512-4GlTZ+EJM7WaW2HEZcyU317tIQDjkQIyENDLxYJfSWlfqguN+dHkZgyQTV/7ykvobU7yEH5gKvreNrH4B6QgIg==}
'@next/eslint-plugin-next@15.5.7': '@next/eslint-plugin-next@15.5.9':
resolution: {integrity: sha512-DtRU2N7BkGr8r+pExfuWHwMEPX5SD57FeA6pxdgCHODo+b/UgIgjE+rgWKtJAbEbGhVZ2jtHn4g3wNhWFoNBQQ==} resolution: {integrity: sha512-kUzXx0iFiXw27cQAViE1yKWnz/nF8JzRmwgMRTMh8qMY90crNsdXJRh2e+R0vBpFR3kk1yvAR7wev7+fCCb79Q==}
'@next/swc-darwin-arm64@15.5.7': '@next/swc-darwin-arm64@15.5.7':
resolution: {integrity: sha512-IZwtxCEpI91HVU/rAUOOobWSZv4P2DeTtNaCdHqLcTJU4wdNXgAySvKa/qJCgR5m6KI8UsKDXtO2B31jcaw1Yw==} resolution: {integrity: sha512-IZwtxCEpI91HVU/rAUOOobWSZv4P2DeTtNaCdHqLcTJU4wdNXgAySvKa/qJCgR5m6KI8UsKDXtO2B31jcaw1Yw==}
@@ -7869,8 +7869,8 @@ packages:
engines: {node: '>=6.0'} engines: {node: '>=6.0'}
hasBin: true hasBin: true
eslint-config-next@15.5.7: eslint-config-next@15.5.9:
resolution: {integrity: sha512-nU/TRGHHeG81NeLW5DeQT5t6BDUqbpsNQTvef1ld/tqHT+/zTx60/TIhKnmPISTTe++DVo+DLxDmk4rnwHaZVw==} resolution: {integrity: sha512-852JYI3NkFNzW8CqsMhI0K2CDRxTObdZ2jQJj5CtpEaOkYHn13107tHpNuD/h0WRpU4FAbCdUaxQsrfBtNK9Kw==}
peerDependencies: peerDependencies:
eslint: ^7.23.0 || ^8.0.0 || ^9.0.0 eslint: ^7.23.0 || ^8.0.0 || ^9.0.0
typescript: '>=3.3.1' typescript: '>=3.3.1'
@@ -10615,8 +10615,8 @@ packages:
react: '*' react: '*'
react-dom: '*' react-dom: '*'
next@15.5.7: next@15.5.9:
resolution: {integrity: sha512-+t2/0jIJ48kUpGKkdlhgkv+zPTEOoXyr60qXe68eB/pl3CMJaLeIGjzp5D6Oqt25hCBiBTt8wEeeAzfJvUKnPQ==} resolution: {integrity: sha512-agNLK89seZEtC5zUHwtut0+tNrc0Xw4FT/Dg+B/VLEo9pAcS9rtTKpek3V6kVcVwsB2YlqMaHdfZL4eLEVYuCg==}
engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0} engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
hasBin: true hasBin: true
peerDependencies: peerDependencies:
@@ -19427,9 +19427,9 @@ snapshots:
read-pkg-up: 9.1.0 read-pkg-up: 9.1.0
semver: 7.7.2 semver: 7.7.2
'@next/env@15.5.7': {} '@next/env@15.5.9': {}
'@next/eslint-plugin-next@15.5.7': '@next/eslint-plugin-next@15.5.9':
dependencies: dependencies:
fast-glob: 3.3.1 fast-glob: 3.3.1
@@ -24513,9 +24513,9 @@ snapshots:
optionalDependencies: optionalDependencies:
source-map: 0.6.1 source-map: 0.6.1
eslint-config-next@15.5.7(eslint@8.57.1)(typescript@5.9.2): eslint-config-next@15.5.9(eslint@8.57.1)(typescript@5.9.2):
dependencies: dependencies:
'@next/eslint-plugin-next': 15.5.7 '@next/eslint-plugin-next': 15.5.9
'@rushstack/eslint-patch': 1.12.0 '@rushstack/eslint-patch': 1.12.0
'@typescript-eslint/eslint-plugin': 8.43.0(@typescript-eslint/parser@8.43.0(eslint@8.57.1)(typescript@5.9.2))(eslint@8.57.1)(typescript@5.9.2) '@typescript-eslint/eslint-plugin': 8.43.0(@typescript-eslint/parser@8.43.0(eslint@8.57.1)(typescript@5.9.2))(eslint@8.57.1)(typescript@5.9.2)
'@typescript-eslint/parser': 8.43.0(eslint@8.57.1)(typescript@5.9.2) '@typescript-eslint/parser': 8.43.0(eslint@8.57.1)(typescript@5.9.2)
@@ -28371,23 +28371,23 @@ snapshots:
netmask@2.0.2: netmask@2.0.2:
optional: true optional: true
next-intl@3.26.5(next@15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react@19.1.2): next-intl@3.26.5(next@15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react@19.1.2):
dependencies: dependencies:
'@formatjs/intl-localematcher': 0.5.10 '@formatjs/intl-localematcher': 0.5.10
negotiator: 1.0.0 negotiator: 1.0.0
next: 15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1) next: 15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1)
react: 19.1.2 react: 19.1.2
use-intl: 3.26.5(react@19.1.2) use-intl: 3.26.5(react@19.1.2)
next-themes@0.2.1(next@15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react-dom@19.1.2(react@19.1.2))(react@19.1.2): next-themes@0.2.1(next@15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1))(react-dom@19.1.2(react@19.1.2))(react@19.1.2):
dependencies: dependencies:
next: 15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1) next: 15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1)
react: 19.1.2 react: 19.1.2
react-dom: 19.1.2(react@19.1.2) react-dom: 19.1.2(react@19.1.2)
next@15.5.7(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1): next@15.5.9(@babel/core@7.28.4)(@playwright/test@1.55.0)(react-dom@19.1.2(react@19.1.2))(react@19.1.2)(sass@1.92.1):
dependencies: dependencies:
'@next/env': 15.5.7 '@next/env': 15.5.9
'@swc/helpers': 0.5.15 '@swc/helpers': 0.5.15
caniuse-lite: 1.0.30001741 caniuse-lite: 1.0.30001741
postcss: 8.4.31 postcss: 8.4.31