{"_id":"fix-react2shell-next","_rev":"18-ec2cf9539446854c0e748ba76b605e1c","name":"fix-react2shell-next","dist-tags":{"latest":"1.1.4"},"versions":{"1.0.6":{"name":"fix-react2shell-next","version":"1.0.6","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.6","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"de6281c7117db981cab635a10b9bfea206c75b29","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.6.tgz","fileCount":5,"integrity":"sha512-BcE7aak1Q6oA9yVsT+PODG+3U0lTMGz7bYHZqgclMcuHoxEfvACS9gUfElpUW3qzpy7m6gutPaRemN1jvzr2vg==","signatures":[{"sig":"MEYCIQDt3HO0MSaImfSFP+9sNcmIqJ8yap0hz75bl+tSZBFglwIhAOmSCiERdy7xgy5+UlBt+VE3yYLAk1V2LY5HAWbh3pDV","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21951},"main":"index.js","engines":{"node":">=16"},"gitHead":"b94693b5144c3114c1a8353ff400fe3e223c5b68","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.6_1764998643006_0.5683003772222042","host":"s3://npm-registry-packages-npm-production"}},"1.0.7":{"name":"fix-react2shell-next","version":"1.0.7","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.7","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"c925dcf0eeaf222cff556ec3877431267adb2390","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.7.tgz","fileCount":5,"integrity":"sha512-/fDid6and4rY9SbdzO5T9xK6zWrbtEpw/HrJa3qoSDkTj5nb+Ly8Ie5+mQBkGavqeKDA9Ej+FtEzulcFq85cIA==","signatures":[{"sig":"MEUCIFG3HJLj3nrvMHc9D7eJZi+yCskEuYYyKjsWFB7AP6OHAiEA7i70gkoTxZ4V6kJWPs+iqTV/1ztMJbwSD1YBSR1soPU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21212},"main":"index.js","engines":{"node":">=16"},"gitHead":"fab792a03d38e611c8f1399027cbe6c74887a489","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.7_1765000083884_0.22648799383792206","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"fix-react2shell-next","version":"1.0.8","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.8","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"7f1ca44e0564fc1296d7aa6d26dcebb4259ba9f0","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.8.tgz","fileCount":5,"integrity":"sha512-yn5hJDvjrXdHj3BMkojRccarRt5T+JAcSTpF/VkmBwmrQHNSs1z7lgfTbjThMWyl+SKqYBQ72ED5YeDa0XrQPQ==","signatures":[{"sig":"MEUCIHYOYonUCTFwHSRUsevHllroEMWkDeVJGx1DWt1jiAdmAiEA12W7+UjagFGKTKIlevxikdRza7LIGeut1e8FJ4IQN/4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21212},"main":"index.js","engines":{"node":">=16"},"gitHead":"fab792a03d38e611c8f1399027cbe6c74887a489","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.9.3","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"22.19.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.8_1765000125878_0.3838669921044291","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"fix-react2shell-next","version":"1.0.9","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.9","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"5b9f268bfc562aa9bf8980fcbae29e6c5ec240a7","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.9.tgz","fileCount":5,"integrity":"sha512-LXtu6u4FUis8kGVwyjap0bvGsvgWt3b07ZpcF5otCxxFzh8rwcayXBSqitKFMK1Nvq2Flgr5iReg3xMXwIuf3Q==","signatures":[{"sig":"MEUCIDZsPFEFCGONGds9gQ79dCt90CqKJfx8lkYWbef95YigAiEA5DhZ0/ol++rtJWVP9YUIvHZoT6BkpJPFIAKTbhHq6tc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21212},"main":"index.js","engines":{"node":">=16"},"gitHead":"41585f3e885f2acc1dbba2a59afd2650da08a948","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.9_1765001135683_0.6923482616126355","host":"s3://npm-registry-packages-npm-production"}},"1.0.10":{"name":"fix-react2shell-next","version":"1.0.10","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.10","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"d95c5fa64a653cb8c2f6eeaa6dacb6bb8a7f183f","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.10.tgz","fileCount":5,"integrity":"sha512-i2zDGruFJgSz17DEkkN9vSJ9BtbMUVDy/BXVucTLEFgqDZTLnwrQJKqMARfQOVRJxduyyHN3SFBgYXwQWJ/djw==","signatures":[{"sig":"MEUCIQCbwIA7+RLmytVlr6qX4R55X3gt3cNNzh6j2EIQIbqHXwIgGKRgFSOErklX8SOYEIb6dedk0QZ+7sl40rHoBefxmRk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21127},"main":"index.js","engines":{"node":">=16"},"gitHead":"41585f3e885f2acc1dbba2a59afd2650da08a948","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.10_1765001396017_0.6532523219902593","host":"s3://npm-registry-packages-npm-production"}},"1.0.11":{"name":"fix-react2shell-next","version":"1.0.11","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.11","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"7142ca6384b9ea78bb7a33e4b10bd26006a9a508","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.11.tgz","fileCount":5,"integrity":"sha512-3Nr1n/N4Bs2kw/XKYjFEYrTHfzMEKxbpzvdrflsbTgXrK70aX5jzfEuVTVZ7FIJk4ayZJr0boF1LAc5Lvyxedw==","signatures":[{"sig":"MEYCIQDQZkMVz6h1J2xcriNAZGg0J8JuKRsmYZXEr17lqRG4XAIhAM/j9Ld5zKbGc3Hk04KbKTITMpqUrV78cHNrYccvTFRM","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21128},"main":"index.js","engines":{"node":">=16"},"gitHead":"41585f3e885f2acc1dbba2a59afd2650da08a948","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.11_1765001504613_0.6910429143123675","host":"s3://npm-registry-packages-npm-production"}},"1.0.12":{"name":"fix-react2shell-next","version":"1.0.12","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.12","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"b744e7e48d365b23b71742a7560f00c32f910a5b","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.12.tgz","fileCount":5,"integrity":"sha512-Sr7kkROsL8i+h27gAlPkaBAU8GgEjeGGxapCGuVIStYgkhXQLuOiz3MiyPmvTbQjdjmI5vviU1MUYJZIl0wW7Q==","signatures":[{"sig":"MEYCIQD8Ywm7u82tHsM4a0TWU8nv3qAldqPuG7hP211S3f81lwIhAMnyC12uNo6DfvaQL8it7CSjR5tHT5dhR7MQmnSvEgaW","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21110},"main":"index.js","engines":{"node":">=16"},"gitHead":"7f47e9fc3080e39462ecbbfd4cc956f30fc3b7b1","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.2","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.12_1765002196601_0.9645194510613804","host":"s3://npm-registry-packages-npm-production"}},"1.0.13":{"name":"fix-react2shell-next","version":"1.0.13","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.13","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"3920785491bb116b22b45e983deae1e24c585653","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.13.tgz","fileCount":5,"integrity":"sha512-FOf6m4ckISTNCadTiAPBsd99A9mwndV8GkCX7wuIDGfqyDXipnX4UL+BbyIQb8Fg06ojS2RPNtEyU/H74iRzCw==","signatures":[{"sig":"MEUCIQCSFC+0zxmtM8S266RiAuQuXdVpGnIFWPngVq9FTFJH1gIgKb3/uIQEJxPA2lBnFB2gh/AyN7OXAkG0lRdJDTV2kn8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21191},"main":"index.js","engines":{"node":">=16"},"gitHead":"021596438d13ad9d008cd924940ee651843b7031","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.9.3","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"22.19.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.13_1765044353504_0.4462760226454503","host":"s3://npm-registry-packages-npm-production"}},"1.0.14":{"name":"fix-react2shell-next","version":"1.0.14","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.14","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"90b5c1ed416885b81f5b4391b997922d5898cc26","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.14.tgz","fileCount":5,"integrity":"sha512-JYl5e9GUtS2jlpcsOTwvHn4FwyzOvwX5FbH/47Asmd2e01AUGc7mqcabVKqEb35O2mGKZu1IlrmLdRNKhx8o8Q==","signatures":[{"sig":"MEYCIQDGIrdNFGqh66zZ1Kvj53echDFyKet7IzuUjw42oAIjvgIhAMtBcm5NPi30tvglo8fpvES/J48pHlJ7FWbrGRInul1P","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":23553},"main":"index.js","engines":{"node":">=16"},"gitHead":"b3ab95fb73198abe5e7638e7178b151c4215fd05","_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_npmVersion":"10.9.3","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"22.19.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.14_1765054175207_0.798267534833593","host":"s3://npm-registry-packages-npm-production"}},"1.0.15":{"name":"fix-react2shell-next","version":"1.0.15","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.15","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"cfce5f55546e12fb5d298b2404194cd52ec2ace8","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.15.tgz","fileCount":5,"integrity":"sha512-IpsUT9NKAItjJRWFBvRt8DEjrz2RP7XdU6KrUBFFA3pW/qSTrI1YGHuTp62RuQbVfT0IuQzBlgRf0Ib1UxB/mQ==","signatures":[{"sig":"MEQCIC5GA1R7tL8Gg5Q1L5lIP0IFyuNHh+6jOXwIsgkXpQp3AiAm/72zWlGdsoszVYR5X7eQ9iY9/nNkxJBVoGvxwV4I4A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":23804},"main":"index.js","_from":"file:fix-react2shell-next-1.0.15.tgz","engines":{"node":">=16"},"scripts":{"release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/e9e30303fffa80f395f009f76d5dcee8/fix-react2shell-next-1.0.15.tgz","_integrity":"sha512-IpsUT9NKAItjJRWFBvRt8DEjrz2RP7XdU6KrUBFFA3pW/qSTrI1YGHuTp62RuQbVfT0IuQzBlgRf0Ib1UxB/mQ==","_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.15_1765131422878_0.15633865589193485","host":"s3://npm-registry-packages-npm-production"}},"1.0.16":{"name":"fix-react2shell-next","version":"1.0.16","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.16","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"3dd0042ccaca814eaecca596267e52534066609e","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.16.tgz","fileCount":5,"integrity":"sha512-mnwWAqqv2TcEGamQN6ZqRBJ55NcxrJ+i8Coori0bh/3KJmZGF2nrS19UjlydWzCP8baBk0H2rL1ZKuyzUXRL3g==","signatures":[{"sig":"MEYCIQDb6h5l4ac9nxDumw3S/tIYhW0TO5IEhYqD3BmCxsaTiAIhAI5tSXk18+Wh1bJor+0LxdGnI4KT1eDo0RoNb1mIpT/+","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":23915},"main":"index.js","_from":"file:fix-react2shell-next-1.0.16.tgz","engines":{"node":">=16"},"scripts":{"release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/2799f8718ad5afeb7664cd4704175802/fix-react2shell-next-1.0.16.tgz","_integrity":"sha512-mnwWAqqv2TcEGamQN6ZqRBJ55NcxrJ+i8Coori0bh/3KJmZGF2nrS19UjlydWzCP8baBk0H2rL1ZKuyzUXRL3g==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.16_1765155596914_0.0799937849336263","host":"s3://npm-registry-packages-npm-production"}},"1.0.17":{"name":"fix-react2shell-next","version":"1.0.17","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.17","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"53e5db9e0d763be05e6fd40742c55405add95654","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.17.tgz","fileCount":5,"integrity":"sha512-/6DWOq8kx+ojK0212T+fo1Uda02+S8U1Flwoasp4tfc0vyequzTYHMHxu7VcMVlxDSLaVm1opYeGyl11iJ8lNw==","signatures":[{"sig":"MEUCIQClD0dreB6XqHysBXYDH1vYTUs+obct3QWP1klp5FF9GAIgWjnKQBSVFSvBIswGLC37mhM78Bpv2KLS6KjUWhOt3Ss=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29790},"main":"index.js","_from":"file:fix-react2shell-next-1.0.17.tgz","engines":{"node":">=16"},"scripts":{"release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/69926abb6f13772b1f410f649693c331/fix-react2shell-next-1.0.17.tgz","_integrity":"sha512-/6DWOq8kx+ojK0212T+fo1Uda02+S8U1Flwoasp4tfc0vyequzTYHMHxu7VcMVlxDSLaVm1opYeGyl11iJ8lNw==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.17_1765156047957_0.9750758196991669","host":"s3://npm-registry-packages-npm-production"}},"1.0.18":{"name":"fix-react2shell-next","version":"1.0.18","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.0.18","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"4f4521af57ebc36d35f408c98e3125ac9f48b3e9","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.0.18.tgz","fileCount":5,"integrity":"sha512-SKKlrLnxrCTnat3XIKbsU7oqeekPwSRAPbT12odScxo8lwMFluhM2Yralwq3dl0fcwPAFFSPM+yTfMQ8oContQ==","signatures":[{"sig":"MEYCIQCZTuMiexvqE+5jOI2GHAKIr+uO7IrMI2ss8N3ijGEHbgIhAMcVcPnR3cZ/w1+3ml1xABhZQfF3RJFhYrRe2JksSQ7c","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":29786},"main":"index.js","_from":"file:fix-react2shell-next-1.0.18.tgz","engines":{"node":">=16"},"scripts":{"release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/29105a614db7fa3c0f62eadf6934b0ea/fix-react2shell-next-1.0.18.tgz","_integrity":"sha512-SKKlrLnxrCTnat3XIKbsU7oqeekPwSRAPbT12odScxo8lwMFluhM2Yralwq3dl0fcwPAFFSPM+yTfMQ8oContQ==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.0.18_1765239556993_0.9818496793673306","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"fix-react2shell-next","version":"1.1.0","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.1.0","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"5251174e53068cade63f6cf2422df6ac38ba96a6","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.1.0.tgz","fileCount":13,"integrity":"sha512-UfxyFhwxtQCnBAFP4CmQFk9yYNwI/9nMQVXZdaoPv1gu6eWJHjwGaw53JxOgDN/dogN5bbna3MNEmxto0jQMIA==","signatures":[{"sig":"MEUCIQDjyap8lPSe6RPxPVWlRrViQhVbYa5IBKKn+J6/PDt0ZgIgER2qZ5BaEBUQUtcxB8LYH/j9bnAo+ZjbcsGQMMvddlM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":47130},"main":"index.js","engines":{"node":">=16"},"gitHead":"9bb63fb89b3be50afdb5c3aee2e4b665dc641f1a","scripts":{"test":"node --test test/*.test.js","release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.9.3","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"22.19.0","_hasShrinkwrap":false,"packageManager":"pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a","devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.1.0_1765487857246_0.35705426892088754","host":"s3://npm-registry-packages-npm-production"}},"1.1.1":{"name":"fix-react2shell-next","version":"1.1.1","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.1.1","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"c9bf5ade0cc7f3dbae146d1b3ef25c1f4b3544eb","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.1.1.tgz","fileCount":13,"integrity":"sha512-nl7gh8IjuFfdOXhn7ULC5M+TzOKBUXz2rpkc5rjFfnwTN4i2e3hUuSgFDEo942NyMfyqaXjK0duR9QXNAMLbIw==","signatures":[{"sig":"MEQCIAQrmE78zM6Jz8OKEEGPnh3Vi1upaTRycE/pxELzQjpnAiBP0ond7nigPulrYE3FU6Jv6u3SwPHbpiUX9N8rGp4Kbw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46957},"main":"index.js","_from":"file:fix-react2shell-next-1.1.1.tgz","engines":{"node":">=16"},"scripts":{"test":"node --test test/*.test.js","release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/57b038a4c46d7a1766483c00e0c6ea07/fix-react2shell-next-1.1.1.tgz","_integrity":"sha512-nl7gh8IjuFfdOXhn7ULC5M+TzOKBUXz2rpkc5rjFfnwTN4i2e3hUuSgFDEo942NyMfyqaXjK0duR9QXNAMLbIw==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.1.1_1765492471331_0.6633823546141695","host":"s3://npm-registry-packages-npm-production"}},"1.1.2":{"name":"fix-react2shell-next","version":"1.1.2","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.1.2","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"9a5f1b980fccaf04ec39c62ea1b04cb9fe595280","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.1.2.tgz","fileCount":14,"integrity":"sha512-YJ4VehA3lkEYyheg8nIx9zbT/+jgazSqZJ/ephjahRnD4oELIsXq4I28qt0s47v0/N1O6pVtHrY5RLxPQStAKg==","signatures":[{"sig":"MEQCIGRhu7aZVYSJZu5lovu6CNou8Gh2HY2cpAtQNNoQ8AsbAiB6N/kDq0P9eAqCr4bxGWZphBFj0MltlT+ojdMJunEARQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":52675},"main":"index.js","_from":"file:fix-react2shell-next-1.1.2.tgz","engines":{"node":">=16"},"scripts":{"test":"node --test test/*.test.js","release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/cc40133f65d2cc91a5558bf46ba36a19/fix-react2shell-next-1.1.2.tgz","_integrity":"sha512-YJ4VehA3lkEYyheg8nIx9zbT/+jgazSqZJ/ephjahRnD4oELIsXq4I28qt0s47v0/N1O6pVtHrY5RLxPQStAKg==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.1.2_1765498772305_0.34154816596132376","host":"s3://npm-registry-packages-npm-production"}},"1.1.3":{"name":"fix-react2shell-next","version":"1.1.3","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","_id":"fix-react2shell-next@1.1.3","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"bin":{"fix-react2shell-next":"bin/cli.js"},"dist":{"shasum":"3ab03615281d99552ec3300427b26d147746f4e7","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.1.3.tgz","fileCount":14,"integrity":"sha512-xKjFbIs7bdY6vhrQB1xPjNr8SYeM72b8SO/M6D65Lqd0EplsqCgN5CIGE55eAbIhu9QqjnsmX8hw+TjZBbCuuw==","signatures":[{"sig":"MEQCIA2K3nPk4JnA/Y/Ft3IJDKvzJExIEsjcf5tISxlJgne1AiBwYvLuEdGG91hn3p8DAro8NOBcB9C2W1eeZQQNT9R48g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":53434},"main":"index.js","_from":"file:fix-react2shell-next-1.1.3.tgz","engines":{"node":">=16"},"scripts":{"test":"node --test test/*.test.js","release":"changeset publish","version":"changeset version","changeset":"changeset"},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"_resolved":"/tmp/615cdfbd9132d3c10b519b5a05e10361/fix-react2shell-next-1.1.3.tgz","_integrity":"sha512-xKjFbIs7bdY6vhrQB1xPjNr8SYeM72b8SO/M6D65Lqd0EplsqCgN5CIGE55eAbIhu9QqjnsmX8hw+TjZBbCuuw==","repository":{"url":"git+https://github.com/vercel-labs/fix-react2shell-next.git","type":"git"},"_npmVersion":"10.8.2","description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","directories":{},"_nodeVersion":"20.19.6","_hasShrinkwrap":false,"devDependencies":{"@changesets/cli":"^2.27.10"},"_npmOperationalInternal":{"tmp":"tmp/fix-react2shell-next_1.1.3_1765507460202_0.5574170481461287","host":"s3://npm-registry-packages-npm-production"}},"1.1.4":{"name":"fix-react2shell-next","version":"1.1.4","repository":{"type":"git","url":"git+https://github.com/vercel-labs/fix-react2shell-next.git"},"description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","main":"index.js","bin":{"fix-react2shell-next":"bin/cli.js"},"keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"author":"","license":"MIT","engines":{"node":">=16"},"devDependencies":{"@changesets/cli":"^2.27.10"},"scripts":{"test":"node --test test/*.test.js","changeset":"changeset","version":"changeset version","release":"changeset publish"},"_id":"fix-react2shell-next@1.1.4","bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","_integrity":"sha512-An2lCE2FuS48BKCi8EfJZU98IHZr6Whlhnuch90SYw+PsCYTj34dl1XGrbcp4PWf5jL0551uHZzBEKj98LGWXQ==","_resolved":"/tmp/0ae1d3399403df0a7bbfa8ac5c2881b1/fix-react2shell-next-1.1.4.tgz","_from":"file:fix-react2shell-next-1.1.4.tgz","_nodeVersion":"20.19.6","_npmVersion":"10.8.2","dist":{"integrity":"sha512-An2lCE2FuS48BKCi8EfJZU98IHZr6Whlhnuch90SYw+PsCYTj34dl1XGrbcp4PWf5jL0551uHZzBEKj98LGWXQ==","shasum":"fa385b5de9c8141a927fff5f3d62148da0162a47","tarball":"https://registry.npmjs.org/fix-react2shell-next/-/fix-react2shell-next-1.1.4.tgz","fileCount":14,"unpackedSize":53487,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIDi7GvkAA43gkK076TPK2rrji/JeBoKK1Aid9epMmeKnAiBZ6qQU566dyK9kHR0V8cHA7EBikJKV1bI6qr/Ko2q3yA=="}]},"_npmUser":{"name":"allen-vercel","email":"allen.zhou@vercel.com"},"directories":{},"maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/fix-react2shell-next_1.1.4_1765508629054_0.016887382060259748"},"_hasShrinkwrap":false}},"time":{"created":"2025-12-06T05:24:03.005Z","modified":"2025-12-12T03:03:49.408Z","1.0.6":"2025-12-06T05:24:03.135Z","1.0.7":"2025-12-06T05:48:04.036Z","1.0.8":"2025-12-06T05:48:46.035Z","1.0.9":"2025-12-06T06:05:35.835Z","1.0.10":"2025-12-06T06:09:56.205Z","1.0.11":"2025-12-06T06:11:44.748Z","1.0.12":"2025-12-06T06:23:16.752Z","1.0.13":"2025-12-06T18:05:53.668Z","1.0.14":"2025-12-06T20:49:35.358Z","1.0.15":"2025-12-07T18:17:03.015Z","1.0.16":"2025-12-08T00:59:57.050Z","1.0.17":"2025-12-08T01:07:28.101Z","1.0.18":"2025-12-09T00:19:17.140Z","1.1.0":"2025-12-11T21:17:37.404Z","1.1.1":"2025-12-11T22:34:31.481Z","1.1.2":"2025-12-12T00:19:32.452Z","1.1.3":"2025-12-12T02:44:20.350Z","1.1.4":"2025-12-12T03:03:49.203Z"},"bugs":{"url":"https://github.com/vercel-labs/fix-react2shell-next/issues"},"license":"MIT","homepage":"https://github.com/vercel-labs/fix-react2shell-next#readme","keywords":["nextjs","react","security","vulnerability","cve","rce","fix","patch"],"repository":{"type":"git","url":"git+https://github.com/vercel-labs/fix-react2shell-next.git"},"description":"Fix the React 2 Shell vulnerability (CVE-2025-66478) in Next.js apps with one command","maintainers":[{"name":"allen-vercel","email":"allen.zhou@vercel.com"}],"readme":"# fix-react2shell-next\n\n![fix-react2shell-next](https://raw.githubusercontent.com/vercel-labs/fix-react2shell-next/main/cli.gif)\n\nOne command to fix **[CVE-2025-66478](https://nextjs.org/blog/CVE-2025-66478)** (React 2 Shell RCE) in your Next.js / React RSC app.\n\n```bash\nnpx fix-react2shell-next\n```\n\nDeterministic version bumps per the official advisories.\n\n## What it does\n\n1. **Recursively scans** all `package.json` files (handles monorepos)\n2. **Checks** for vulnerable versions of:\n   - `next`\n   - `react-server-dom-webpack`\n   - `react-server-dom-parcel`\n   - `react-server-dom-turbopack`\n3. **Patches** to the correct fixed version based on your current version\n4. **Refreshes** your lockfile with the detected package manager\n\n## Affected Versions\n\n### Next.js\n\n| Current Version | Patched Version |\n|-----------------|-----------------|\n| 15.0.0 – 15.0.4 | 15.0.5 |\n| 15.1.0 – 15.1.8 | 15.1.9 |\n| 15.2.0 – 15.2.5 | 15.2.6 |\n| 15.3.0 – 15.3.5 | 15.3.6 |\n| 15.4.0 – 15.4.7 | 15.4.8 |\n| 15.5.0 – 15.5.6 | 15.5.7 |\n| 16.0.0 – 16.0.6 | 16.0.7 |\n| 15.x canaries | 15.6.0-canary.58 |\n| 16.x canaries | 16.1.0-canary.12 |\n| 14.3.0-canary.77+ | Downgrade to 14.3.0-canary.76 or upgrade to 15.0.5 |\n\n### React RSC Packages\n\n| Current Version | Patched Version |\n|-----------------|-----------------|\n| 19.0.0 | 19.0.1 |\n| 19.1.0, 19.1.1 | 19.1.2 |\n| 19.2.0 | 19.2.1 |\n\n## Usage\n\n### Check & Fix (Interactive)\n\n```bash\nnpx fix-react2shell-next\n```\n\n### Auto-fix (CI / Non-interactive)\n\n```bash\nnpx fix-react2shell-next --fix\n```\n\n### Check Only (Dry Run)\n\n```bash\nnpx fix-react2shell-next --dry-run\n```\n\n### JSON Output (for scripting)\n\n```bash\nnpx fix-react2shell-next --json\n```\n\n## Example Output\n\n```\n🔍 fix-react2shell-next - CVE-2025-66478 vulnerability scanner\n\n📂 Found 3 package.json file(s)\n\n🚨 Found 2 vulnerable file(s):\n\n  📄 package.json\n     next: ^15.1.0 → 15.1.9\n\n  📄 apps/web/package.json\n     next: ^15.4.3 → 15.4.8\n     react-server-dom-webpack: 19.1.0 → 19.1.2\n\n🔧 Apply fixes? [Y/n] y\n\n🔧 Applying fixes...\n\n   ✓ Updated package.json\n   ✓ Updated apps/web/package.json\n\n📦 Package manager: pnpm\n🔄 Refreshing lockfile...\n\n$ pnpm install\n\n✅ Patches applied!\n   Remember to test your app and commit the changes.\n```\n\n## Monorepo Support\n\nThe tool automatically finds all `package.json` files in your project, excluding:\n- `node_modules`\n- `.next`, `.turbo`, `.vercel`, `.nuxt`\n- `dist`, `build`, `.output`\n- `coverage`\n\nWorks with npm, yarn, pnpm, and bun workspaces.\n\n## References\n\n- [GitHub Advisory GHSA-9qr9-h5gf-34mp](https://github.com/advisories/GHSA-9qr9-h5gf-34mp)\n- [Next.js Security Advisory](https://nextjs.org/blog/CVE-2025-66478)\n- [React Security Advisory](https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components)\n\n## License\n\nMIT\n","readmeFilename":"README.md"}