From 964e1a5beba4ea840f1398037edd0f4e4d64c74e Mon Sep 17 00:00:00 2001 From: "Abdullah." <125115953+mabdullahabaid@users.noreply.github.com> Date: Fri, 19 Dec 2025 20:26:47 +0500 Subject: [PATCH] fix: next has a denial of service with server components (#16710) Resolves the following alert created as a follow up to the previously merged PR: [Dependabot Alert 351](https://github.com/twentyhq/twenty/security/dependabot/351). --- packages/twenty-emails/package.json | 4 +- yarn.lock | 104 ++++++++++++++-------------- 2 files changed, 54 insertions(+), 54 deletions(-) diff --git a/packages/twenty-emails/package.json b/packages/twenty-emails/package.json index d379f69810..393d5dbe18 100644 --- a/packages/twenty-emails/package.json +++ b/packages/twenty-emails/package.json @@ -21,11 +21,11 @@ "@lingui/cli": "^5.1.2", "@lingui/swc-plugin": "^5.6.0", "@lingui/vite-plugin": "^5.1.2", - "@react-email/preview-server": "5.0.8", + "@react-email/preview-server": "5.1.0", "@tiptap/core": "^3.4.2", "@types/react": "^19", "@types/react-dom": "^19", - "react-email": "5.0.8", + "react-email": "5.1.0", "vite-plugin-dts": "3.8.1" }, "exports": { diff --git a/yarn.lock b/yarn.lock index 7e94491c28..0df96e6525 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11816,10 +11816,10 @@ __metadata: languageName: node linkType: hard -"@next/env@npm:16.0.9": - version: 16.0.9 - resolution: "@next/env@npm:16.0.9" - checksum: 10c0/06bbe92cf392b941fe61ecb4bfd1ce1f8d562acf5ace26cb46e68b8d4d3b56c26ccccca0e221411f9cd18e4921833af79c709450e131544c2d0c39991df2834e +"@next/env@npm:16.0.10": + version: 16.0.10 + resolution: "@next/env@npm:16.0.10" + checksum: 10c0/6f2b5ba37733a49513ab3117c06f037fa962b4022fe2b4ba7801f830ab15974ad87ad8b47b6464fa5fcb3e9a3247b25f657ec97ae6eed1156b5736c6388246db languageName: node linkType: hard @@ -11839,9 +11839,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-darwin-arm64@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-darwin-arm64@npm:16.0.9" +"@next/swc-darwin-arm64@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-darwin-arm64@npm:16.0.10" conditions: os=darwin & cpu=arm64 languageName: node linkType: hard @@ -11853,9 +11853,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-darwin-x64@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-darwin-x64@npm:16.0.9" +"@next/swc-darwin-x64@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-darwin-x64@npm:16.0.10" conditions: os=darwin & cpu=x64 languageName: node linkType: hard @@ -11867,9 +11867,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-linux-arm64-gnu@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-linux-arm64-gnu@npm:16.0.9" +"@next/swc-linux-arm64-gnu@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-linux-arm64-gnu@npm:16.0.10" conditions: os=linux & cpu=arm64 & libc=glibc languageName: node linkType: hard @@ -11881,9 +11881,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-linux-arm64-musl@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-linux-arm64-musl@npm:16.0.9" +"@next/swc-linux-arm64-musl@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-linux-arm64-musl@npm:16.0.10" conditions: os=linux & cpu=arm64 & libc=musl languageName: node linkType: hard @@ -11895,9 +11895,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-linux-x64-gnu@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-linux-x64-gnu@npm:16.0.9" +"@next/swc-linux-x64-gnu@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-linux-x64-gnu@npm:16.0.10" conditions: os=linux & cpu=x64 & libc=glibc languageName: node linkType: hard @@ -11909,9 +11909,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-linux-x64-musl@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-linux-x64-musl@npm:16.0.9" +"@next/swc-linux-x64-musl@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-linux-x64-musl@npm:16.0.10" conditions: os=linux & cpu=x64 & libc=musl languageName: node linkType: hard @@ -11923,9 +11923,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-win32-arm64-msvc@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-win32-arm64-msvc@npm:16.0.9" +"@next/swc-win32-arm64-msvc@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-win32-arm64-msvc@npm:16.0.10" conditions: os=win32 & cpu=arm64 languageName: node linkType: hard @@ -11944,9 +11944,9 @@ __metadata: languageName: node linkType: hard -"@next/swc-win32-x64-msvc@npm:16.0.9": - version: 16.0.9 - resolution: "@next/swc-win32-x64-msvc@npm:16.0.9" +"@next/swc-win32-x64-msvc@npm:16.0.10": + version: 16.0.10 + resolution: "@next/swc-win32-x64-msvc@npm:16.0.10" conditions: os=win32 & cpu=x64 languageName: node linkType: hard @@ -17233,12 +17233,12 @@ __metadata: languageName: node linkType: hard -"@react-email/preview-server@npm:5.0.8": - version: 5.0.8 - resolution: "@react-email/preview-server@npm:5.0.8" +"@react-email/preview-server@npm:5.1.0": + version: 5.1.0 + resolution: "@react-email/preview-server@npm:5.1.0" dependencies: - next: "npm:16.0.9" - checksum: 10c0/1e5e6e0846f9def2743baca89252c36f4fb684279444f0d25561122915abc44a502ec543ff13c748d6ae255571adab37ea8e6921f142539b546cfa325d525993 + next: "npm:16.0.10" + checksum: 10c0/2b290979ddcd83dfc420dee85504b24be915958874b198fb7f42accfc3a1dfbf43e50990f4461d4e23550c557f371d09d4bf26887d9709f87e586c82a5aaffcc languageName: node linkType: hard @@ -46005,19 +46005,19 @@ __metadata: languageName: node linkType: hard -"next@npm:16.0.9": - version: 16.0.9 - resolution: "next@npm:16.0.9" +"next@npm:16.0.10": + version: 16.0.10 + resolution: "next@npm:16.0.10" dependencies: - "@next/env": "npm:16.0.9" - "@next/swc-darwin-arm64": "npm:16.0.9" - "@next/swc-darwin-x64": "npm:16.0.9" - "@next/swc-linux-arm64-gnu": "npm:16.0.9" - "@next/swc-linux-arm64-musl": "npm:16.0.9" - "@next/swc-linux-x64-gnu": "npm:16.0.9" - "@next/swc-linux-x64-musl": "npm:16.0.9" - "@next/swc-win32-arm64-msvc": "npm:16.0.9" - "@next/swc-win32-x64-msvc": "npm:16.0.9" + "@next/env": "npm:16.0.10" + "@next/swc-darwin-arm64": "npm:16.0.10" + "@next/swc-darwin-x64": "npm:16.0.10" + "@next/swc-linux-arm64-gnu": "npm:16.0.10" + "@next/swc-linux-arm64-musl": "npm:16.0.10" + "@next/swc-linux-x64-gnu": "npm:16.0.10" + "@next/swc-linux-x64-musl": "npm:16.0.10" + "@next/swc-win32-arm64-msvc": "npm:16.0.10" + "@next/swc-win32-x64-msvc": "npm:16.0.10" "@swc/helpers": "npm:0.5.15" caniuse-lite: "npm:^1.0.30001579" postcss: "npm:8.4.31" @@ -46060,7 +46060,7 @@ __metadata: optional: true bin: next: dist/bin/next - checksum: 10c0/42493a6a50b89aae623cfbcceaa987744a351967ccd6a15b851ebd38d9142a710ad42b8ae88ac9857d70e4c7201d466563901db84b71189dedf41284b54ac0de + checksum: 10c0/c0e42bfaa0d38b0ee9a7fc54c748da2dfd807a76d75278b4c4f06768965d7b1035b836cae45e24a074dcf156a13c0fa555caa652886cc0f93e8be2b296dfbb51 languageName: node linkType: hard @@ -50381,9 +50381,9 @@ __metadata: languageName: node linkType: hard -"react-email@npm:5.0.8": - version: 5.0.8 - resolution: "react-email@npm:5.0.8" +"react-email@npm:5.1.0": + version: 5.1.0 + resolution: "react-email@npm:5.1.0" dependencies: "@babel/parser": "npm:^7.27.0" "@babel/traverse": "npm:^7.27.0" @@ -50404,7 +50404,7 @@ __metadata: tsconfig-paths: "npm:4.2.0" bin: email: dist/index.js - checksum: 10c0/cfb1fdbb396162e741321790c66f8034bdcf64e1b854e7c8489853476ee9563c190df8b5d91feb17fd0f2a072e3ae8f7ce5ec51eb9425298dc99742b36379ad8 + checksum: 10c0/7dd6d344a9d27c4ac9238fe7c67ed0e9288200176a1ecdc27470163ea3ad48e3b782e895c21ee7870430dc873dbe930c7ea37d02199308d93eee25e16206db70 languageName: node linkType: hard @@ -56289,11 +56289,11 @@ __metadata: "@lingui/react": "npm:^5.1.2" "@lingui/swc-plugin": "npm:^5.6.0" "@lingui/vite-plugin": "npm:^5.1.2" - "@react-email/preview-server": "npm:5.0.8" + "@react-email/preview-server": "npm:5.1.0" "@tiptap/core": "npm:^3.4.2" "@types/react": "npm:^19" "@types/react-dom": "npm:^19" - react-email: "npm:5.0.8" + react-email: "npm:5.1.0" twenty-shared: "workspace:*" vite-plugin-dts: "npm:3.8.1" peerDependencies: