9da40724b4
Fixes CVE-2026-44574 (CVSS 8.1), CVE-2026-44575 (CVSS 7.5), CVE-2026-45109 (CVSS 7.5): attackers could bypass middleware auth in App Router applications via dynamic route parameter injection and segment-prefetch routes. Also fixes CVE-2026-44579 (DoS, CVSS 7.5) and CVE-2026-44576 (cache poisoning, CVSS 5.4).
52 lines
1.3 KiB
JSON
52 lines
1.3 KiB
JSON
{
|
|
"name": "corex-nexredirect",
|
|
"version": "0.1.32",
|
|
"license": "MIT",
|
|
"overrides": {
|
|
"postcss": "^8.5.13",
|
|
"uuid": "^11.1.0",
|
|
"nodemailer": "^8.0.7"
|
|
},
|
|
"scripts": {
|
|
"dev": "tsx watch server.ts",
|
|
"build": "next build",
|
|
"start": "NODE_ENV=production tsx server.ts",
|
|
"lint": "next lint"
|
|
},
|
|
"dependencies": {
|
|
"@radix-ui/react-dialog": "^1.1.4",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.6",
|
|
"@radix-ui/react-label": "^2.1.2",
|
|
"@radix-ui/react-slot": "^1.2.0",
|
|
"@radix-ui/react-tooltip": "^1.1.8",
|
|
"@types/nodemailer": "^8.0.0",
|
|
"bcryptjs": "^2.4.3",
|
|
"better-sqlite3": "^11.5.0",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"lucide-react": "^0.511.0",
|
|
"maxmind": "^4.3.20",
|
|
"next": "^15.5.18",
|
|
"next-auth": "^4.24.14",
|
|
"nodemailer": "^8.0.7",
|
|
"puppeteer-core": "^24.42.0",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"recharts": "^2.13.3",
|
|
"tailwind-merge": "^2.6.0",
|
|
"tailwindcss-animate": "^1.0.7",
|
|
"tsx": "^4.21.0",
|
|
"zod": "^3.24.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/bcryptjs": "^2.4.6",
|
|
"@types/better-sqlite3": "^7.6.11",
|
|
"@types/node": "^20",
|
|
"@types/react": "^19",
|
|
"@types/react-dom": "^19",
|
|
"autoprefixer": "^10.4.21",
|
|
"postcss": "^8.5.13",
|
|
"tailwindcss": "^3.4.17",
|
|
"typescript": "^5"
|
|
}
|
|
}
|