i/next-ai-draw-io
1
0
Fork 0
mirror of https://github.com/DayuanJiang/next-ai-draw-io.git synced 2026-09-02 01:20:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: upgrade React to 19.1.2 to patch CVE-2025-55182 (#176)

Browse Source 
Fixes critical RCE vulnerability (CVSS 10.0) in React Server Components
caused by deserialization of untrusted data.

Closes #175
This commit is contained in:
Dayuan Jiang
2025-12-08 23:31:17 +09:00
committed by GitHub
parent 95c5a75ca3
commit f6cfcab45a
2 changed files with 12 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package.json
View File

@@ -48,8 +48,8 @@
"ollama-ai-provider-v2": "^1.5.4",
"pako": "^2.1.0",
"prism-react-renderer": "^2.4.1",
"react": "^19.0.0",
"react-dom": "^19.0.0",
"react": "^19.1.2",
"react-dom": "^19.1.2",
"react-drawio": "^1.0.3",
"react-icons": "^5.5.0",
"react-markdown": "^10.1.0",