Diego Rodrigues de Sa e Souza 2e355dd0b9 chore(deps): bump next to 16.2.11 (9 security advisories) (#8265) ...

Closes 9 Dependabot alerts (#135-#143) — Next.js 16.0.0..<16.2.11:
SSRF in Server Actions/rewrites, cache confusion, DoS (Server Actions,
Image Optimization SVG, Edge payload), middleware/proxy bypass, and
unauthenticated Server Function endpoint disclosure.

Lockfile bump within the existing ^16.2.6 range (now floored at
^16.2.11); no production code touched.

Co-authored-by: rafaumeu <rafael.zendron22@gmail.com>

2026-07-24 11:43:44 -03:00

28 KiB

Raw Blame History

View Raw