From ff113566a2a3519b499930060c33cb9473494661 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Tue, 27 Jan 2026 13:05:52 +0000
Subject: [PATCH] fix: upgrade Next.js to patch CVE-2026-23864

- chain-abstraction-demo: 14.2.35 -> 15.5.10
- pos-dapp: 15.5.9 -> 15.5.10
- react-dapp-v2-cosmos-provider: 15.4.10 -> 15.4.11
- react-dapp-v2-with-ethers: 14.2.35 -> 15.5.10
- react-dapp-v2: 14.2.35 -> 15.5.10
- smart-sessions-demo: 14.2.35 -> 15.5.10
- react-wallet-v2: 15.5.9 -> 15.5.10

CVE-2026-23864 addresses multiple denial of service vulnerabilities
in React Server Components. The vulnerabilities are triggered by
sending specially crafted HTTP requests to Server Function endpoints.

Reference: https://vercel.com/changelog/summary-of-cve-2026-23864
Co-Authored-By: Ben Kremer <ben@reown.com>
---
 advanced/dapps/chain-abstraction-demo/package.json        | 2 +-
 advanced/dapps/pos-dapp/package.json                      | 2 +-
 advanced/dapps/react-dapp-v2-cosmos-provider/package.json | 2 +-
 advanced/dapps/react-dapp-v2-with-ethers/package.json     | 2 +-
 advanced/dapps/react-dapp-v2/package.json                 | 2 +-
 advanced/dapps/smart-sessions-demo/package.json           | 2 +-
 advanced/wallets/react-wallet-v2/package.json             | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/advanced/dapps/chain-abstraction-demo/package.json b/advanced/dapps/chain-abstraction-demo/package.json
index 3778b688c..95ffe42e6 100644
--- a/advanced/dapps/chain-abstraction-demo/package.json
+++ b/advanced/dapps/chain-abstraction-demo/package.json
@@ -26,7 +26,7 @@
     "class-variance-authority": "0.7.0",
     "clsx": "2.1.1",
     "lucide-react": "0.439.0",
-    "next": "14.2.35",
+    "next": "15.5.10",
     "next-themes": "^0.4.4",
     "ox": "0.6.9",
     "react": "18.3.1",
diff --git a/advanced/dapps/pos-dapp/package.json b/advanced/dapps/pos-dapp/package.json
index 7476ebd6f..08dcd56c5 100644
--- a/advanced/dapps/pos-dapp/package.json
+++ b/advanced/dapps/pos-dapp/package.json
@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@reown/appkit": "1.8.2",
-    "next": "15.5.9",
+    "next": "15.5.10",
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "react-hot-toast": "^2.6.0",
diff --git a/advanced/dapps/react-dapp-v2-cosmos-provider/package.json b/advanced/dapps/react-dapp-v2-cosmos-provider/package.json
index 27e3d5f29..d0c72fa85 100644
--- a/advanced/dapps/react-dapp-v2-cosmos-provider/package.json
+++ b/advanced/dapps/react-dapp-v2-cosmos-provider/package.json
@@ -44,7 +44,7 @@
     "eth-sig-util": "^2.5.3",
     "ethereumjs-util": "^7.0.6",
     "ethers": "^5.3.0",
-    "next": "15.4.10",
+    "next": "15.4.11",
     "prop-types": "^15.7.2",
     "qr-image": "^3.2.0",
     "react": "^18.3.1",
diff --git a/advanced/dapps/react-dapp-v2-with-ethers/package.json b/advanced/dapps/react-dapp-v2-with-ethers/package.json
index 05ac868e0..200b29ca4 100644
--- a/advanced/dapps/react-dapp-v2-with-ethers/package.json
+++ b/advanced/dapps/react-dapp-v2-with-ethers/package.json
@@ -45,7 +45,7 @@
     "eth-sig-util": "^2.5.3",
     "ethereumjs-util": "^7.0.6",
     "ethers": "5.7.2",
-    "next": "14.2.35",
+    "next": "15.5.10",
     "prop-types": "^15.7.2",
     "qr-image": "^3.2.0",
     "react": "^18.3.1",
diff --git a/advanced/dapps/react-dapp-v2/package.json b/advanced/dapps/react-dapp-v2/package.json
index 8f81a8e41..ed3160358 100644
--- a/advanced/dapps/react-dapp-v2/package.json
+++ b/advanced/dapps/react-dapp-v2/package.json
@@ -46,7 +46,7 @@
     "ethers": "^5.3.0",
     "fp-ts": "^2.13.1",
     "near-api-js": "^6.0.1",
-    "next": "14.2.35",
+    "next": "15.5.10",
     "prop-types": "^15.7.2",
     "qr-image": "^3.2.0",
     "react": "^18.3.1",
diff --git a/advanced/dapps/smart-sessions-demo/package.json b/advanced/dapps/smart-sessions-demo/package.json
index 2bdc42a9b..588efc9b6 100644
--- a/advanced/dapps/smart-sessions-demo/package.json
+++ b/advanced/dapps/smart-sessions-demo/package.json
@@ -33,7 +33,7 @@
     "class-variance-authority": "^0.7.0",
     "clsx": "2.1.0",
     "lucide-react": "^0.427.0",
-    "next": "14.2.35",
+    "next": "15.5.10",
     "next-themes": "^0.3.0",
     "permissionless": "0.1.31",
     "pino-pretty": "^11.2.2",
diff --git a/advanced/wallets/react-wallet-v2/package.json b/advanced/wallets/react-wallet-v2/package.json
index 70a1d3536..c99447fd6 100644
--- a/advanced/wallets/react-wallet-v2/package.json
+++ b/advanced/wallets/react-wallet-v2/package.json
@@ -75,7 +75,7 @@
     "graphql": "^16.8.2",
     "near-api-js": "^0.45.0",
     "near-seed-phrase": "^0.2.1",
-    "next": "15.5.9",
+    "next": "15.5.10",
     "permissionless": "0.1.43",
     "react": "18.2.0",
     "react-code-blocks": "0.1.5",