fix for CVE-2025-67779 (#1043)

Author: vicb

.changeset/shy-fans-learn.md

@@ -0,0 +1,7 @@
+---
+"@opennextjs/aws": patch
+---
+
+fix for CVE-2025-67779
+
+See <https://nextjs.org/blog/security-update-2025-12-11>

create-cloudflare/next/package.json

@@ -14,7 +14,7 @@
 	},
 	"dependencies": {
 		"@opennextjs/cloudflare": "^1.14.4",
-		"next": "15.5.8",
+		"next": "15.5.9",
 		"react": "19.1.3",
 		"react-dom": "19.1.3"
 	},

examples/bugs/gh-119/package.json

@@ -14,7 +14,7 @@
 		"cf-typegen": "wrangler types --env-interface CloudflareEnv"
 	},
 	"dependencies": {
-		"next": "15.5.8",
+		"next": "15.5.9",
 		"react-dom": "^18.3.1",
 		"react": "^18.3.1"
 	},

examples/bugs/gh-219/package.json

@@ -28,7 +28,7 @@
 		"nanoid": "^5.0.9",
 		"next-auth": "^4.24.11",
 		"next-themes": "^0.4.4",
-		"next": "15.5.8",
+		"next": "15.5.9",
 		"qrcode.react": "^4.2.0",
 		"react-dom": "^19.0.2",
 		"react-hook-form": "^7.54.2",

examples/bugs/gh-223/package.json

@@ -16,7 +16,7 @@
 	"dependencies": {
 		"@aws-sdk/client-s3": "^3.721.0",
 		"@aws-sdk/s3-request-presigner": "^3.721.0",
-		"next": "15.5.8",
+		"next": "15.5.9",
 		"react": "^19.0.2",
 		"react-dom": "^19.0.2"
 	},

examples/playground14/package.json

@@ -16,7 +16,7 @@
 		"cf-typegen": "wrangler types --env-interface CloudflareEnv"
 	},
 	"dependencies": {
-		"next": "^14.2.33",
+		"next": "^14.2.35",
 		"react": "catalog:",
 		"react-dom": "catalog:"
 	},

examples/playground15/package.json

@@ -16,7 +16,7 @@
 		"cf-typegen": "wrangler types --env-interface CloudflareEnv"
 	},
 	"dependencies": {
-		"next": "^15.5.8",
+		"next": "^15.5.9",
 		"react": "^19.0.2",
 		"react-dom": "^19.0.2"
 	},

examples/ssg-app/package.json

@@ -15,7 +15,7 @@
 	"dependencies": {
 		"react": "^19.0.0",
 		"react-dom": "^19.0.0",
-		"next": "15.5.7"
+		"next": "15.5.9"
 	},
 	"devDependencies": {
 		"@opennextjs/cloudflare": "workspace:*",

packages/cloudflare/package.json

@@ -54,7 +54,7 @@
 	"dependencies": {
 		"@ast-grep/napi": "0.40.0",
 		"@dotenvx/dotenvx": "catalog:",
-		"@opennextjs/aws": "3.9.5",
+		"@opennextjs/aws": "3.9.6",
 		"cloudflare": "^4.4.1",
 		"enquirer": "^2.4.1",
 		"glob": "catalog:",
@@ -86,6 +86,6 @@
 	},
 	"peerDependencies": {
 		"wrangler": "catalog:",
-		"next": "^14.2.34 || ~15.0.6 || ~15.1.10 || ~15.2.7 || ~15.3.7 || ~15.4.9 || ~15.5.8 || ^16.0.9"
+		"next": "^14.2.35 || ~15.0.7 || ~15.1.11 || ~15.2.8 || ~15.3.8 || ~15.4.10 || ~15.5.9 || ^16.0.10"
 	}
 }