fix vulnerability

weissaufschwarz · Dec 19, 2024 · e33e446 · e33e446
1 parent a08c678
commit e33e446
Show file tree

Hide file tree

Showing 3 changed files with 118 additions and 102 deletions.
diff --git a/.changeset/serious-snails-kneel.md b/.changeset/serious-snails-kneel.md
@@ -0,0 +1,5 @@
+---
+"@weissaufschwarz/mitthooks-nextjs": patch
+---
+
+FIx vulnerability: If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed.
diff --git a/packages/mitthooks-nextjs/package.json b/packages/mitthooks-nextjs/package.json
@@ -31,6 +31,6 @@
         "@repo/eslint-config": "workspace:*"
     },
     "peerDependencies": {
-        "next": ">=14"
+        "next": ">=14.2.15"
     }
 }