Upgrading next 6 to 7
Unknown6.1.2 → 7.0.3Security1
SecurityModerate · CVSS 6.1Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error pageGHSA-qw96-mm2g-c8m7 · CVE-2018-18282 ↗
UnknownUpgrade verdict
None of the 83 releases in this range publish notes, so breaking changes can't be ruled out.
In plain terms
- Some releases in this range publish no notes, so DepDelta can't rule out breaking changes.
- DepDelta found no commit log for them either.
Must act 1 item needs code or config changes
Adds @babel/runtime-corejs2 7.0.0, autodll-webpack-plugin 0.4.2, cacache ^11.0.2, find-cache-dir 2.0.0, launch-editor 2.2.1, nanoid 1.2.1, react-error-overlay 4.0.0, schema-utils 1.0.0, serialize-javascript 1.4.0, terser 3.16.1, webpackbar 2.6.3, worker-farm 1.5.2.
Drops @babel/plugin-transform-react-jsx-source, react-lifecycles-compat, touch, uglifyjs-webpack-plugin, update-check, uuid, walk.
Installs 753 packages in all (was 787).
What you must change
Security1
Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page
Moderate · CVSS 6.1